Our Analysts Found the Zhenai Dump Circulating in Telegram Channels

HEROIC analysts found the Zhenai dataset circulating on underground forums and private Telegram channels. The breach occured in December 2011 and exposed 5,014,317 records from the Chinese dating platform, including email addresses and plaintext passwords. The data has resurfaced repeatedly in credential aggregation lists sold to cybercriminals.

Why the Zhenai Breach Is Dangerous

Dating sites hold sensitive personal details, and when passwords are stored in plaintext, attackers gain immediate, ready-to-use credentials. The Zhenai dump gives anyone who obtains it a working list of real email and password pairs that can be tested across banking, email, and social media platforms in automated credential stuffing runs.

What Was Exposed in the Zhenai Leak

• Email addresses
• Plaintext passwords

Why This Zhenai Data Puts You at Risk

Plaintext passwords make credential stuffing trivial. Attackers run automated bots that test each email and password combination across hundredds of websites simultaneously. If you used the same password on Zhenai as on another platform, that account is at risk of takeover. Successful attacks lead to fraudulent purchases, identity theft, and unauthorized access to email and financial accounts.

How a Database Breach Works

A database breach occurs when an attacker exploits a vulnerability in a web application or server to extract the underlying data store. Attackers typically use SQL injection, stolen administrator credentials, or misconfigured access controls to dump the entire database. Once the data is extracted, it is packaged and distributed through private channels before eventuly appearing on public forums and marketplaces.

Check If Your Data Was Exposed

HEROIC operates one of the world's largest breach databases, covering more than 400 billion leaked records. Use HEROIC's free breach scanner to check if your email address or credentials appeared in the Zhenai leak or thousands of other breaches in our database.