Fotolog
fotolog.com
About This Breach
The Fotolog Data Breach in December 2018 exposed 16.7 million unique email addresses along with usernames and unsalted SHA-256 password hashes. Following the breach, the photo sharing social network was dissolved and later repurposed as a news website based in Brcko, Bosnia and Herzegovina.
Data Exposed
Breach Details
| Breach Type | Data Breach |
| Searchable | Yes |
| Verified | Yes |
| Sensitive Data | No |
| Reference | No reference available |
Frequently Asked Questions
When did the Fotolog data breach happen?
Fotolog was breached in Dec 2018. The breach was added to the XposedOrNot index on February 23, 2026.
How many records were exposed in the Fotolog breach?
16,720,492 records were exposed, making it the #99 largest of the 794 breaches in our index.
What data was exposed in the Fotolog breach?
The exposed data includes: Email addresses, Usernames, Passwords.
What should I do if I was affected by the Fotolog breach?
Change your password on Fotolog and anywhere you reused it, and make the new one long and unique. Turn on two-factor authentication, and set up free breach alerts on XposedOrNot so you know the moment your email appears in a new breach.
More Entertainment Breaches
What Should You Do?
Change Your Passwords
Passwords were strongly hashed, but change it anyway if you reused it elsewhere. Make the new one long and unique.
Enable Two-Factor Authentication
Add 2FA on all supported accounts using an authenticator app like Google Authenticator or Authy.
Monitor Your Accounts
Set up login alerts and review account activity regularly for suspicious access.
Use a Password Manager
Never reuse passwords: use a password manager to generate unique ones for each account.