Keepyourlinks Leak Means Someone Could Be Logging Into Your Accounts

HEROIC analysts identified a database breach affecting Keepyourlinks, a now-defunct link-saving service, dating back to February 17, 2016. The exposed file contains 3,933 records, including email addresses, usernames, and passwords stored in plain text.

Why the Keepyourlinks Leak Is Dangerous

Storing passwords in plain text means there is nothing standing between an attacker and a working login. No hashing, no cracking, no delay: whoever has this file can try each email, username, and password combination on other websites the moment they open it.

What Was Exposed in the Keepyourlinks Breach

• Email addresses
• Usernames
• Passwords (stored in plaintext)

Why This Matters

Small, niche sites like Keepyourlinks are often treated as low stakes, which is exactly why people reuse passwords on them. If you ever created an account here and used that password anywhere else, including your email or social media accounts, that other account is exposed right now, not just hypothetically. Attackers automate this kind of credential stuffing, testing stolen logins across hundreds of services at once.

How This Database Breach Happened

This breach fits the pattern of a direct database export, an attacker gaining access to Keepyourlinks' backend and pulling the full user table, including email addresses, usernames, and plaintext passwords, in a single action. Storing passwords without any hashing or encryption is one of the most basic security failures a site can make, and it's why this data remains immediately usable years after the fact.

Check If You Are Affected

If you ever had a Keepyourlinks account, or you have a habit of reusing passwords across different sites, it's worth checking your exposure now. HEROIC's free breach scanner searches a database of more than 400 billion leaked records, so you can find out where your email address has appeared and change any passwords that are still at risk.