Have I Been Pwned added SongTrivia2 in April 2026 after the music trivia platform's data was published to a public hacking forum. HIBP counted about 291.7 thousand unique email addresses sourced from Google OAuth logins or native site accounts.
The dataset also included auth tokens, names, usernames, avatars, and for site-created accounts, bcrypt password hashes. The public HIBP summary did not establish the original intrusion vector, so BreachHistory records the exposure as a confirmed leaked account dataset while leaving root cause open.
Canonical record: SongTrivia2 2026 breach on BreachHistory.
Sources: Have I Been Pwned, DarkWebInformer forum-leak reference