Last.fm

In March 2012, the Last.fm music site was hacked and 43 million post and passwords MD5 were disclosed. The site found out about the incident right away, but hid it and the scale of the leak was not known until September 2016.