Vancl Breach: 137K Chinese Shoppers’ Phone Numbers Leaked

HEROIC's DarkHive intelligence system flagged the Vancl data breach, which exposed 136,977 records from a Chinese e-commerce platform. The breach occured in April 2011 and compromised user phone numbers and usernames. Vancl was a popular online fashion retailer in China, meaning the affected users were real shoppers whose contact information was left vulnerable to exploitation by cybercriminals.

Why This Is Dangerous

Phone numbers combined with usernames are a potent tool for SMS-based attacks. Thier exposure allows threat actors to craft convincing smishing messages that appear to come from Vancl, prompting victims to click malicious links or hand over additional account details. Attackers can also use phone numbers to attempt SIM-swapping, effectively seizing control of mobile accounts and bypassing two-factor authentication on banking apps, email, and other sensitive services. The absence of passwords in this dataset does not reduce the real-world risk.

What Was Exposed

• Phone numbers
• Usernames

Why This Matters

More than 136,000 Chinese shoppers had thier contact details circulated in breach databases. Even years after the initial leak, this data remains usable for targeted phishing campaigns. Attackers combine phone numbers with other leaked datasets to build detailed profiles of individuals, enabling more convincing fraud attempts. Victims who registered with Vancl in 2011 may have since used the same phone number across banking, social media, and government services, making each exposed record a potential gateway to broader identity compromise.

How Database Breaches Work

Database breaches at e-commerce platforms often result from insufficiently secured web applications or backend infrastructure. SQL injection attacks, compromised admin credentials, and improperly configured cloud storage are among the most common entry points. Once attackers gain access to a user database, they can extract all records in minutes. The legitmate-looking data that emerges from these breaches is then packaged and sold on dark web markets, where it retains value for years as a source for targeted attacks.

Check If You Are Affected

HEROIC offers a free identity scanner that searches over 400 billion records to determine whether your phone number or personal information was exposed in the Vancl breach or any other known data incident. If your details appeared in this dataset, you may be at ongoing risk from SMS-based fraud and account takeover attempts. Visit heroic.com to scan your identity free and take steps to protect your accounts today.