Watchtower - Last.fm hacked in 2012

@OLLI_S,

if you want a comprehensive list of hacked email, have a look at Troy Hunt's Have I been Pwned website. Enter your email inside the search box to find out which sites have been pwned, or compromised.

https://haveibeenpwned.com

"How is a breach verified as legitimate?
There are often "breaches" announced by attackers which in turn are exposed as hoaxes. There is a balance between making data searchable early and performing sufficient due diligence to establish the legitimacy of the breach. The following activities are usually performed in order to validate breach legitimacy:

Has the impacted service publicly acknowledged the breach?
Does the data in the breach turn up in a Google search (i.e. it's just copied from another source)?
Is the structure of the data consistent with what you'd expect to see in a breach?
Have the attackers provided sufficient evidence to demonstrate the attack vector?
Do the attackers have a track record of either reliably releasing breaches or falsifying them?"

"What is an "unverified" breach?
Some breaches may be flagged as "unverified". In these cases, it may not have been possible to establish the legitimacy of the breach beyond reasonable doubt. Unverified breaches are still included in the system because regardless of their legitimacy, they still contain personal information about individuals who want to understand their exposure on the web. Further background on unverified breaches can be found in the blog post titled Introducing unverified breaches to Have I been pwned."