Yue Video Streaming Breach: 2.5 Million Chinese Accounts Exposed

HEROIC's DarkHive intelligence system flagged the Yue data breach, exposing 2,506,962 records. The breach occured in April 2011 and affected users of Yue.com, a China-based video streaming platform. Compromised data included email addresses and plaintext passwords from over 2.5 million accounts.

Why This Is Dangerous

Plaintext passwords from a video streaming platform are immediately usable by attackers without any additional processing. Video streaming users frequently share accounts across household members and use the same email and password on entertainment platforms, email services, and social media. Over 2.5 million plaintext credentials from 2011 continue to power credential stuffing campaigns targeting current streaming services, social platforms, and email providers where users have reused thier Yue.com passwords for over a decade.

What Was Exposed

• Email Address
• Passwords (plaintext)

Why This Matters

The scale of this breach, over 2.5 million accounts, places it among the larger plaintext password exposures from the 2011 era of major Chinese platform breaches. Chinese email addresses from video streaming platforms overlap significantly with accounts on Weibo, WeChat, Alibaba, and other services, creating a broad attack surface when combined with working passwords. Attackers who successfully match Yue.com credentials to current accounts gain full access without triggering anomaly detection since they are using the victim's actual password. This breach has been incorporated into large aggregated credential files that circulate in underground markets.

How Database Breaches Work

Chinese video streaming platforms in 2011 often stored user credentials with minimal security measures due to rapid growth prioritizing features over security. An attacker gaining access to the user database through SQL injection or misconfigured storage could extract all 2.5 million records in a single operation. Platforms storing passwords without hashing make every extracted record immediately exploitable. The resulting credential file, once posted on underground forums, circulates indefinitely and gets merged into large-scale automated attacks that run continuously against active services where victims may have reused occured the same passwords.

Check If You Are Affected

HEROIC offers a free identity scanner that searches over 400 billion records, including data from breaches like Yue. Visit heroic.com to scan your email address and find out if your information was exposed.