In July 2016, now defunct website Kaneva, the service to "build and explore virtual worlds", suffered a data breach that exposed 3.9M user records. The data included email addresses, usernames, dates of birth and salted MD5 password hashes.
Source: HaveIBeenpwned
Source Link: https://haveibeenpwned.com/PwnedWebsites#Kaneva