2018 Roll20 — 4M accounts (virtual tabletop)
Data compromised
Email addresses, IP addresses, names, last four digits of credit cards, bcrypt password hashes
Technical writeup
Roll20 database compromised in December 2018. Breach announced February 2019 after stolen data appeared on dark web marketplaces.
Root cause
Hacked - vulnerability exploitation