Have I Been Pwned Adds Quitbro and Lovora Breaches Linked to Plantake

Have I Been Pwned (HIBP) added two alleged February 2026 breaches affecting Plantake-made mobile apps: porn addiction app Quitbro and couples/relationship app Lovora. Quitbro exposure is listed as sensitive and not publicly searchable on HIBP; it allegedly impacted 23k unique email addresses and included years of birth, in-app questionnaire responses, and users’ last recorded relapse time. Lovora allegedly exposed 496k unique email addresses along with display names, profile photos, and other personal information collected through app usage; in both cases, Plantake reportedly did not respond to multiple contact attempts.

Separately, Canadian retailer Canadian Tire disclosed an October 2025 breach of an e-commerce customer database affecting 38+ million accounts, with exposed data including names, addresses, emails, year of birth, and PBKDF2 password hashes; a smaller subset included full dates of birth and some records included truncated payment card data. The company stated in-store transactions and certain business units (e.g., Canadian Tire Bank and Triangle Rewards) were not impacted, and it reported remediation, regulatory notification, customer outreach, and credit monitoring; HIBP also added the Canadian Tire dataset, but it is a distinct incident from the Plantake app breaches.