Pi-hole data breach
From Breaches, in the HARD wiki · Updated
This article is about the July 2025 breach of Pi-hole. For every breach, see Breaches.
The Pi-hole data breach exposed 29,926 accounts from pi-hole.net in July 2025. The data taken includes names and email addresses.[1]
Have I Been Pwned verified it and added it to its search on 31 Jul 2025, within a month. It is the 604th largest of the 618 breaches in HARD’s list.
What was exposed
Pi-hole’s breach included 2 kinds of data. What each lets criminals do:
| Data | What it’s used for |
|---|---|
| Names | Makes scam messages personal enough to believe. |
| Email addresses | Expect scam emails that name the company to look genuine. |
What to do
- Check whether you’re in it.Search your email address on Have I Been Pwned. It tells you which breaches it appears in, Pi-hole among them, without showing the data.
- Distrust messages that mention Pi-hole.Scammers use breach data to sound genuine. Don’t click links in emails or texts about the breach; go to the site yourself.
- Expect the data to resurface.Breach data is sold and combined with other leaks for years. Stay wary of messages that know a little too much about you.
Timeline
- : the breach, as best it can be dated.
- : Have I Been Pwned verifies the data and adds it to its search, within a month.
Similar breaches
Breaches that leaked the same kinds of data, closest in time:
- Under Armour, November 2025, 73 million accounts
- Canadian Tire, October 2025, 38 million accounts
- SoundCloud, December 2025, 30 million accounts
- Prosper, September 2025, 18 million accounts
- Vietnam Airlines, June 2025, 7.3 million accounts
- Bouygues Telecom, August 2025, 5.7 million accounts
See Breaches for all 618, and Updates for keeping your devices patched.
References
External links
- Have I Been Pwned, to check your email address
- pi-hole.net, Pi-hole’s website