Badoo 2013 Data Breach
ObscureIQ Breach Intelligence
Low SeverityWebsite / service breach
Badoo Social Dating Platform Breach (2013, Disclosed 2016): 125 Million User Records Including Passwords & DOB Exposed
Online dating and social networking platform.
Verified by ObscureIQ Intelligence
25/100Breach Risk Index
6Data Value
25Market Recency
584dSince Breach
Breach Intelligence Summary
Entity: Badoo · Actor: Unknown · Sources: 11 references
Attack: Unknown
Profile: Platform · Social networking and dating services · Mobile-first social platform · Global
Timeline: Breach (2013-06-01) · Indexed (Dec 01, 2024) · Year (2013)
Exposure: 125.3M records · 6 fields: Date of Birth, Email Address, Full Name, Gender, Password, Username
Status: Unverified
Executive Summary
A dataset attributed to the dating platform Badoo, dating to around 2013, surfaced among traders by 2016 and contained roughly 127.4 million records (about 112 million unique email addresses). The data included usernames, first and last names, full dates of birth, genders, and passwords stored as MD5 hashes. HIBP could not conclusively verify provenance and lists the breach as unverified.
ObscureIQ assessment: High sensitivity. Exposure enables harassment, stalking, extortion, and identity linkage around dating behavior, location patterns, and intimate social activity.
Breach Impact
If accurate, MD5-hashed credentials plus names and dates of birth support identity profiling and credential stuffing; the dating context adds sensitivity given potential exposure of relationship-seeking activity.
About Badoo
Badoo is a large dating and social-discovery platform where users meet new people and chat, with a global user base.
Why They Hold Your Data
Social and dating platforms collect highly sensitive profile data, photos, messages, location-linked activity, relationship intent, and account records tied to social and romantic interaction.
Recent Developments
A dataset attributed to Badoo circulated among traders; HIBP lists the breach as unverified and, given its sensitive dating context, not publicly searchable.
Data Points Exposed
6 verified field types
Date of Birth High
Email Address
Full Name High
Gender
Password Critical
Username
Field names are shown in full for clarity and search visibility. Canonical machine keys are emitted only in this page’s structured data.
Exploitation & Downstream Threats
Threat Activity:Moderate
Primary downstream threats:
- Credential stuffing against reused passwords across other platforms
- Identity verification bypass using name + date of birth combination
- Targeted phishing campaigns using exposed email addresses
Threat vectors:
- Identity verification bypass
- Phishing, credential stuffing & account takeover
- Name-based social engineering
- Profile enrichment
- Credential stuffing & account takeover
- Cross-platform tracking & credential stuffing
Recommended Actions
If you believe your information may be included:
Change Reused Passwords
Update this account and anywhere you reused the password; use a manager.
Enable MFA Everywhere
Turn on multi-factor authentication on email first, then financial accounts.
Report & Recover
If you spot misuse, start an official recovery plan and report fraud.
Frequently Asked Questions
What happened in the Badoo breach?▾
A dataset attributed to the dating platform Badoo, dating to around 2013, surfaced among traders by 2016 and contained roughly 127.4 million records (about 112 million unique email addresses). The data included usernames, first and last names, full dates of birth, genders, and passwords stored as…
What data was exposed?▾
Verified fields include Date of Birth, Email Address, Full Name, Gender, Password, Username.
What should I do if I was affected?▾
Change reused passwords, enable MFA, and (if identity or financial data is involved) freeze your credit and monitor your accounts.
Sources & References
Every claim on this page is traceable. This breach draws on:
Breach Index
Breach Index
Cross-source
9ghz
Cross-source
BreachAware
Cross-source
BreachForums_Official_Index
Cross-source
DataViper.io
Cross-source
Dehashed
Cross-source
Hashes.org
Cross-source
Keeper
Cross-source
LeakBase.pw
ObscureIQ Intelligence
ObscureIQ proprietary analysis
Protect Yourself
Check If You're Affected
Enter your email to check whether your data appears in this breach. We’ll send a 6-digit code to confirm it’s your address.
Get Free Breach Alerts
Be the first to know when new breaches are disclosed. Free forever — confirm your email with a 6-digit code.
High-Risk? Get an Exposure Audit
Executives, public figures, and high-visibility operators can receive tailored exposure intelligence and hardening guidance.
Request Consultation