Chia.ua Breach: 94,269 Records Including Plaintext Passwords Exposed

In July 2025, HEROIC identified 94,269 records from Chia.ua, a Ukrainian ecommerce platform. The data was shared on a Telegram channel and contained email addresses, phone numbers, usernames, full names, IP addresses, gender, and both plaintext and MD5-hashed passwords.

Why the Chia.ua Breach Is Dangerous

This breach exposed two categories of credentials simultaneously: plaintext passwords that are immediately usable by attackers, and MD5 hashes that can be cracked via rainbow tables within hours. Together, this means the vast majority of the 94,269 exposed accounts are effectively compromised with no additional effort required.

What Was Exposed in the Chia.ua Leak

• Email addresses
• Phone numbers
• Usernames
• First and last names
• Plaintext passwords
• MD5 password hashes
• IP addresses
• Gender

Why This Chia.ua Data Puts You at Risk

The combination of email, phone number, and password in a single record creates a complete credential package -- enough to attempt account takeovers on banking platforms, national services, and social media, and to execute SIM swap attacks using the exposed phone numbers. Victims who reused their Chia.ua password anywhere are at immediate risk of account takeover.

How Database Breaches Work

Attackers accessed the Chia.ua database and extracted 94,269 user records, including both legacy plaintext passwords and MD5-hashed credentials. The data was distributed via a Telegram channel, enabling rapid dissemination across cybercriminal networks. The presence of both password types suggests the platform stored credentials using inconsistent security practices across different user cohorts.

Check If Your Data Was Exposed

HEROIC operates one of the world's largest breach databases, covering more than 400 billion leaked records. Use HEROIC's free breach scanner to check if your email address or credentials appeared in the Chia.ua leak or thousands of other breaches in our database.