Several sites had their databases of user accounts not only breached but stolen this year. This list does not include reports of user records that were exposed due to poor security. Myspace (427 million user accounts stolen) or Yahoo! (a cool billion) Both were hacked supposedly before 2016, but were only reported this year. This list also does not feature reports of poor security, but where there is no evidence they were actually stolen, it doesn’t include user records exposed. The following sites are ranked starting at the fewest user accounts with passwords that were taken.”]
Source: https://www.csoonline.com/article/3151786/10-biggest-hacks-of-user-data-in-2016.html