2018 HauteLook — 28.5M records (Nordstrom subsidiary)
Data compromised
Names, genders, DOB, bcrypt password hashes
Technical writeup
HauteLook, Nordstrom's flash sale site, was breached with 28 million unique email addresses exposed. The data included names, genders, dates of birth, and bcrypt password hashes. 82% of affected users were already in Have I Been Pwned.
Root cause
Unauthorized access; hacking