The South African cinema company Ster-Kinekor had a security flaw which leaked a large amount of customer data via an enumeration vulnerability in the API of their old website.
Whilst more than 6 million accounts were leaked by the flaw, the exposed data only contained 1.6 million unique email addresses. The data also included extensive personal information such as names, addresses, birth dates, genders and plain text passwords.
We've added this information to our leak tracker. If you're worried about shared password leaks or would like to know more, take a look at our leak tracker for business.