Personal Data Leak Monitor

GFAN data breach

22.5M accounts from GFAN (gfan.com) were exposed in this breach. Besides email addresses, it included passwords, which makes it a high-risk breach.

Breach date
October 10, 2016
Accounts
22,526,334
Added to the database
October 10, 2016

Was your email address in this breach?

Check if your email has leaked

We display where your address leaked and what went with it. We never store the address.

We don't store your address. It is checked right here against about 1029 breaches, including this one.

What leaked

Email addressesIP addressesPasswordsUsernames

What to do now

  1. Please change that password, and anywhere you reused it
  2. Do not tap links in emails claiming to be that service
  3. Verify you have not reused that login anywhere

Tools that help with this breach

1PasswordPaidVisit the official site →(opens in a new tab)YubiKeyPaidVisit the official site →(opens in a new tab)

About this breach

In October 2016, data surfaced that was allegedly obtained from the Chinese website known as GFAN and contained 22.5M accounts. Whilst there is evidence that the data is legitimate, due to the difficulty of emphatically verifying the Chinese breach it has been flagged as "unverified". The data in the breach contains email and IP addresses, user names and salted and hashed passwords. Read more about Chinese data breaches in Have I Been Pwned.

Source: Have I Been Pwned (CC BY 4.0)

Similar breaches from the same period