WhiteDate data breach: 20K accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2026-01-06
In December 2025, the dating website "for a Europid vision" WhiteDate suffered a data breach that was subsequently leaked online, initially exposing 6.1k unique email addresses. The leaked data included extensive personal information such as physical appearance, income, education and IQ. A more comprehensive dataset was later provided to HIBP, containing usernames, IP addresses, private messages, phpBB password hashes and a total of 20k unique email addresses. Exposed data: ages, astrological signs, bios, device information, education levels, email addresses, family structure, forum posts, genders, geographic locations, income levels, ip addresses, iq levels, nicknames, passwords, physical attributes, private messages, profile photos, races, relationship statuses, sexual orientations, usernames. The breach dates from Dec 29, 2025; Have I Been Pwned loaded it on Jan 6, 2026.
What to do
- If you had a WhiteDate account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch