Researchers Link iChatAsia to 7,938 Exposed Plaintext Passwords

Researchers Link iChatAsia to 7,938 Exposed Plaintext Passwords

HEROIC analysts have identified a data breach affecting iChatAsia, a dating platform, that exposed 7,938 user records. The breach dates back to July 2015 and the compromised data includes email addresses, usernames, and passwords stored in plaintext.

Why a Plaintext Password Leak Needs No Cracking

Because iChatAsia stored these passwords without hashing or encryption, anyone who obtains this data can read every password exactly as the user typed it. There is no delay for cracking, no computing power required, just an immediately usable list of email and password pairs.

What Was Exposed

• Email addresses
• Usernames
• Passwords (plaintext)

Why This Matters

A dating site account often shares a password with more important accounts like email or banking, simply because people tend to reuse passwords across services they consider less important. Attackers exploit this through credential stuffing, testing breached email and password combinations across many other websites automatically until one works.

How a Database Breach Like This Happens

This incident is classified as a database breach, meaning attackers gained direct access to iChatAsia's user database rather than compromising accounts one at a time. Storing passwords in plaintext is considered a serious security lapse, and once a database like this is breached, an attacker can extract every email, username, and password in a single action.

Check If You Are Affected

If you ever had an account on iChatAsia, update that password anywhere else you may have used it. HEROIC's free breach scanner checks your email against more than 400 billion breached records, including this one, so you can confirm your exposure and secure any accounts still using that password.