- Total Records6,057,827
- Unique Emails5,989,826
- Unique IP Addresses1,943,826
- Unique Usernames6,058,415
ToonDoo Data Breach Exposes Over 6 Million Users’ Information in 2019
In August 2019, ToonDoo—a popular online comic strip creation platform—experienced a significant data breach that impacted more than 6 million subscribers. Attackers gained unauthorized access to the platform’s backend systems, extracting various types of personal subscriber details. These details, ranging from usernames and email addresses to hashed passwords and IP address logs, were later shared publicly on a well-known hacking forum in November 2019. With such a large-scale exposure, ToonDoo's community found itself at the center of a major privacy event that highlighted how creative and educational sites can also become targets for data theft.
What Happened in the ToonDoo Breach?
The ToonDoo breach started in early August 2019, when cybercriminals infiltrated ToonDoo's network. The attackers exfiltrated a database containing account information of over 6 million registered users. This information was then posted for public download on a hacking forum three months later, making it widely accessible to the criminal underground and anyone else curious enough to look.
What Data Was Leaked in the ToonDoo Breach?
Attackers managed to extract the following pieces of information from ToonDoo:
- Usernames
- Email addresses
- Geographic details (city, country)
- Profile URLs
- Salted password hashes
- IP addresses
Though passwords themselves were not revealed in plain text, the inclusion of salted password hashes still posed a risk. The leak's scope included not just basic contact information but also network details and login credentials protected by cryptographic hashing and salting.
How Many Users Were Impacted?
The breach compromised 6,057,828 user records, making it one of the larger leaks affecting creative online communities in 2019. Anyone who had registered with ToonDoo prior to August 2019 could have been affected by this breach.
When Was ToonDoo's Data Breach Made Public?
Although the breach occurred in August 2019, the exposed database was posted on a hacking forum in November 2019. This three-month gap between the intrusion and the public leak gave attackers ample time to exploit the information before it became widely known in the security community and to affected users.
ToonDoo Data Breach Timeline
- August 2019: Attackers gained access to ToonDoo’s database and began extracting data.
- November 2019: The stolen data set was published on a popular hacking forum for public access.
FAQ about the ToonDoo Data Breach
What happened in the ToonDoo data breach?
In August 2019, ToonDoo’s platform was compromised by attackers who stole user account details, including usernames, hashed passwords, emails, and more. The stolen data was later leaked online in November 2019.
How many users were affected by the ToonDoo breach?
The ToonDoo breach affected more than 6 million users, with a total of 6,057,828 user records exposed.
What information was leaked during the ToonDoo data breach?
Leaked information included usernames, email addresses, IP addresses, city and country of residence, profile URLs, and salted password hashes.
Who was responsible for the ToonDoo data breach?
The breach was executed by unidentified threat actors who gained access to ToonDoo's systems and later distributed the compromised data online.
How can I check if I'm in the ToonDoo breach?
You can check if your information was part of the ToonDoo breach by utilizing the DeHashed search engine.