Fanlore data breach
144,520 accounts exposed.
Check whether your email is included on Have I Been Pwned.
What was exposed
Email addressesNamesPasswordsUsernames
What to do
- Change your Fanlore password, and the password on any other site where you used the same one.
- Expect more phishing emails that mention this service. Do not click links in them; go to the site directly.
- Turn on two-step verification wherever it is offered, and use a password manager.
About this breach
In August 2026, the Organization for Transformative Works (OTW) identified unauthorised access to the Fanlore wiki it operates. The breach resulted in the exposure of 145k unique email addresses along with usernames and passwords stored as either MD5 or PBKDF2 hashes. OTW self-submitted the exposed data to HIBP.