Toonbook Data Breach
The 2015 Toonbook data breach occurred in November 2015 when the user database of Toonbook (toonbook.me), a dedicated social network and community hub for players of Disney's Toontown Online and Toontown Rewritten, was exposed and leaked online.
Exposed Data Types
5- Email addresses
- Usernames
- IP addresses
- Account statuses
- Registration dates
About This Breach
What information was affected in the Toonbook incident?
The leaked dataset (Toonbook_November_2015.txt) comprises account and telemetry records of registered players. The incident compromised records for 32,020 unique community members, exposing:
- Player Identifiers: Account usernames, registration timestamps, and account moderation statuses.
- Contact Credentials: Canonical email addresses.
- Network Telemetry: Account creation IP addresses and last login IP addresses (both IPv4 and IPv6).
- Activity Data: Message count volume.
How many accounts were affected?
Rigorous RFC canonical parsing and deduplication confirmed 32,020 unique valid email addresses.
Technical analysis and security risks
Because gaming community members frequently reuse usernames and passwords across games and email accounts, this leak exposes players to credential stuffing, account takeover (ATO), and spear-phishing campaigns targeting gaming credentials.
Recommended actions for affected users
Community members who maintained an account on Toonbook should:
- Update credentials on linked email accounts and gaming portals.
- Ensure passwords used on Toonbook are retired and replaced with strong, unique passwords.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
