What was exposed, when it happened, and which databases confirm it.
- accounts
- 38,048,468
- Breached
- October 10, 2016
- Last Update
- October 10, 2016
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
What happened
In October 2016, data surfaced that was allegedly obtained from the Chinese website known as GFAN and contained 22.5M accounts. Whilst there is evidence that the data is legitimate, due to the difficulty of emphatically verifying the Chinese breach it has been flagged as "unverified". The data in the breach contains email and IP addresses, user names and salted and hashed passwords. Read more about Chinese data breaches in Have I Been Pwned.
Compromised Info
- Email addresses
- IP addresses
- Passwords
- Usernames
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- LeakCheck— linked via automatic string matching
- Dehashed— linked via domain matching
- HIBP
FAQ
What was leaked in the GFAN breach?
The GFAN breach exposed: Email addresses, IP addresses, Passwords, and Usernames.
When did the GFAN breach happen?
The GFAN breach was disclosed on October 10, 2016 and affected 22,526,334 records.
Am I affected by the GFAN breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the GFAN leak.