2012 Last.fm — 43.5M accounts
Data compromised
Email addresses, usernames, passwords, website activity
Technical writeup
Breach March 22, 2012; full scale revealed September 2016. LeakedSource cracked 96% of passwords in 2 hours.
Root cause
Hacked - unsalted MD5 password hashing