Someone Has Your Password: 50,535 Dating Credentials Leaked

HEROIC identified a stealer log collection specifically targeting dating platform users that was shared on Telegram in February 2023. The dump contains 50,535 records, each linking an email address to a plaintext password and the URL of the dating service where the credential was stolen. Dating site credentials carry uniquely sensitive implications, as their exposure can lead to embarrassment, blackmail, and identity theft beyond typical account compromise.

Plaintext Passwords Expose Your Most Private Accounts

All 50,535 passwords in this dump are stored in plaintext, meaning they can be used immediately without any technical skill. Dating platforms contain highly personal information including private messages, photos, location data, and relationship preferences. When these passwords are exposed unprotected, attackers gain access not just to an account, but to intimate details that can be weaponized for extortion or social engineering.

What Was Exposed

• Email Addresses — tied to dating platform registrations
• Plaintext Passwords — completely unencrypted and immediately usable
• URLs — revealing which specific dating services were accessed

Credential Stuffing and the Risk to Your Other Accounts

Beyond the dating platforms themselves, these credentials pose a broader threat. Attackers routinely test stolen email-and-password pairs against hundreds of other services. If you used the same password for a dating site as for your email, banking, or work accounts, all of those are now at risk. The personal nature of dating data also makes victims more susceptible to phishing attacks that leverage leaked information to appear legitimate.

How Infostealers Target Dating Site Users

Infostealer malware captures credentials as users log into websites and apps. The malware intercepts browser-stored passwords, records keystrokes, and steals authentication cookies. Dating site credentials are particularly sought after by threat actors because they can be monetized through sextortion schemes, identity fraud, and targeted phishing campaigns. These logs are then compiled and distributed on Telegram channels, often categorized by platform type.

Check If Your Credentials Were Exposed

Given the sensitive nature of dating platform accounts, it is critical to determine your exposure immediately. HEROIC's breach scanner covers over 400 billion compromised records and can check whether your email or password appears in this dump or any other known data breach. Verify your credentials now, change any compromised passwords, and enable two-factor authentication on all accounts to prevent unauthorized access.