One Leaked Database. 51,242 Plaintext iChatUSA Passwords Exposed.

One Leaked Database. 51,242 Plaintext iChatUSA Passwords Exposed.

HEROIC analysts have identified a data breach affecting iChatUSA, a US-based dating platform, that exposed 51,242 user records. The breach dates back to July 2015 and the compromised data includes email addresses, usernames, and passwords stored in plaintext.

Why a Dating Site Password Leak Is Especially Risky

Because these passwords were never hashed or encrypted, anyone who gets hold of this data can read every password immediately. There is no cracking step required, no waiting for computing power to catch up. If a person used this same email and password combination on any other account, an attacker can log in right away, no technical skill needed.

What Was Exposed

• Email addresses
• Usernames
• Passwords (plaintext)

Why This Matters

Plaintext passwords are as close to a master key as a breach gets. Attackers use lists like this one to attempt logins across email providers, social media, and financial accounts through credential stuffing, and because there is nothing to crack, the process is instant and fully automated. Reused passwords are the single biggest reason a breach like this leads to real account takeover elsewhere.

How a Database Breach Like This Happens

This incident is classified as a database breach, meaning attackers gained direct access to iChatUSA's user database rather than intercepting individual logins one at a time. Storing passwords in plaintext instead of hashing them is a significant security failure, and once an attacker breaches a database like this, they can extract every username, email, and password in a single action.

Check If You Are Affected

If you ever had an account on iChatUSA, change that password everywhere you may have reused it, right away. HEROIC's free breach scanner checks your email against more than 400 billion breached records, including this one, so you can confirm your exposure and lock down any accounts still using that password.