What was exposed, when it happened, and which databases confirm it.
- accounts
- 8,307,711
- Breached
- January 1, 2011
- Last Update
- November 7, 2016
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
What happened
In approximately 2011, data was allegedly obtained from the Chinese gaming website known as Duowan.com and contained 2.6M accounts. Whilst there is evidence that the data is legitimate, due to the difficulty of emphatically verifying the Chinese breach it has been flagged as "unverified". The data in the breach contains email addresses, user names and plain text passwords. Read more about Chinese data breaches in Have I Been Pwned.
Compromised Info
- Email addresses
- Passwords
- Usernames
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- LeakCheck— linked via automatic string matching
- Dehashed— linked via domain matching
- HIBP
FAQ
What was leaked in the Duowan breach?
The Duowan breach exposed: Email addresses, Passwords, and Usernames.
When did the Duowan breach happen?
The Duowan breach was disclosed on January 1, 2011 and affected 2,639,894 records.
Am I affected by the Duowan breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the Duowan leak.