What was exposed, when it happened, and which databases confirm it.
- accounts
- 20,322,959
- Breached
- June 1, 2018
- Last Update
- January 18, 2021
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In mid-2018, the Hong Kong-based retailer Romwe suffered a data breach which exposed almost 20 million customers. The data was subsequently sold online and includes names, phone numbers, email and IP addresses, customer geographic locations and passwords stored as salted SHA-1 hashes. The data was provided to HIBP by dehashed.com.
Compromised Info
- Geographic locations
- IP addresses
- Names
- Passwords
- Phone numbers
- Physical addresses
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
791,139 accounts DEHASHED reports beyond HIBP
Sources & Link Methods
- LeakCheck— linked via automatic string matching
- Dehashed— linked via domain matching
- HIBP
FAQ
What was leaked in the Romwe breach?
The Romwe breach exposed: Geographic locations, IP addresses, Names, Passwords, Phone numbers, and Physical addresses.
When did the Romwe breach happen?
The Romwe breach was disclosed on June 1, 2018 and affected 20,322,959 records.
Am I affected by the Romwe breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the Romwe leak.