Hostinger said that unauthorized access to an internal API server exposed hashed passwords of 14 million customers.
Source: Threadpost