Scan Your Email: Doxbin Scrape Exposed 106,024 Usernames

HEROIC analysts logged a Doxbin breach dated October 11, 2025, after a scrape of the paste site's listings and registered-user base surfaced on a hacker forum and in Telegram channels. The dump exposed 106,024 distinct usernames tied to account holders and the individuals named in those pastes. No email addresses, passwords, or phone numbers were part of this particular file. The only way to know if your own username is among them is to scan your email.

Why a Paste Site's User List Still Matters

Doxbin is built around publishing other people's private details, so having a username confirmed on its user list is information some account holders would rather keep quiet. Even without emails or passwords attached, being tied to this specific platform can carry its own kind of exposure.

What Was Exposed

• Username: confirms an account or mention tied to this platform, something many would prefer to keep private.

Why This Matters

Because no passwords or contact details were included here, this file alone won't hand anyone access to your accounts. The real risk is association: a confirmed username tied to a site like Doxbin can be used to target someone with harassment or follow-up scams that reference the platform by name.

How This Breach Type Works

This was a database breach, meaning the usernames came directly from Doxbin's own paste listings and user records rather than from malware on someone's device. Whoever pulled the data scraped what the site already stored about its pastes and account holders, then redistributed the resulting list.

Were You Named in the Doxbin Scrape?

Run the scan your email tool above first. Since no passwords or contact details were part of this file, there's no login to reset here, but stay alert for messages that reference this username or claim ties to Doxbin, since that detail alone can make a scam feel convincing. This holds whether the account in question is personal or connected to your work.