In January, the maker of teddy bears that record children’s voices and sends them to family and friends via the internet CloudPets left their database publicly exposed and it was subsequently downloaded by external parties (the data was also subject to 3 different ransom demands). 583k records were provided to HIBP via a data trader and included email addresses and bcrypt hashes, but the full extent of user data exposed by the system was over 821k records and also included children’s names and references to portrait photos and voice recordings.
Accounts breached: 583503
Breached on: January 01, 2017
Exposed data: Email addresses, Family members’ names, and Passwords
Added on: February 27, 2017