Dodonew.com 2011 Data Breach
ObscureIQ Breach Intelligence
Low SeverityWebsite / service breach
Dodonew Chinese Download & Discussion Forum Breach (2011): 16 Million User Accounts Exposed
Chinese download and software discussion forum.
Verified by ObscureIQ Intelligence
23/100Breach Risk Index
5Data Value
25Market Recency
511dSince Breach
Breach Intelligence Summary
Entity: Dodonew.com · Actor: Unknown · Sources: 11 references
Attack: Unknown
Profile: Online Community · Download-sharing and discussion community content · Download and discussion forum · China
Timeline: Breach (2011-12-01) · Indexed (Feb 12, 2025) · Year (2011)
Exposure: 16.3M records · 3 fields: Email Address, Password, Username
Status: Unverified
Executive Summary
A dataset attributed to Dodonew.com, dated to late 2011, is one of the well-known Chinese breach corpora, containing roughly 16.3 million records with email addresses, usernames, and plaintext passwords. HIBP indexes a smaller email/username subset (about 8.7 million) and lists the breach as unverified.
ObscureIQ assessment: Exposure enables phishing, harassment, and profiling based on download behavior. File-sharing context may also support malware-themed scams or legal-sensitive targeting.
Breach Impact
Plaintext passwords require no cracking, so the credentials are immediately usable for stuffing attacks; the dataset’s wide circulation in research and criminal circles compounds long-term exposure.
About Dodonew.com
Dodonew.com was a Chinese web portal and community site, associated with the wave of major Chinese site breaches in late 2011.
Why They Hold Your Data
Download-sharing forums collect user accounts, emails, messages, and content-participation records tied to downloads, links, and community discussion.
Recent Developments
The Dodonew dataset became one of the widely studied plaintext-password corpora from the 2011 Chinese breach wave.
Data Points Exposed
3 verified field types
Email Address
Password Critical
Username
Field names are shown in full for clarity and search visibility. Canonical machine keys are emitted only in this page’s structured data.
Exploitation & Downstream Threats
Threat Activity:Moderate
Primary downstream threats:
- Credential stuffing against reused passwords across other platforms
- Targeted phishing campaigns using exposed email addresses
Threat vectors:
- Phishing, credential stuffing & account takeover
- Credential stuffing & account takeover
- Cross-platform tracking & credential stuffing
Recommended Actions
If you believe your information may be included:
Change Reused Passwords
Update this account and anywhere you reused the password; use a manager.
Enable MFA Everywhere
Turn on multi-factor authentication on email first, then financial accounts.
Report & Recover
If you spot misuse, start an official recovery plan and report fraud.
Frequently Asked Questions
What happened in the Dodonew.com breach?▾
A dataset attributed to Dodonew.com, dated to late 2011, is one of the well-known Chinese breach corpora, containing roughly 16.3 million records with email addresses, usernames, and plaintext passwords. HIBP indexes a smaller email/username subset (about 8.7 million) and lists the breach as…
What data was exposed?▾
Verified fields include Email Address, Password, Username.
What should I do if I was affected?▾
Change reused passwords, enable MFA, and (if identity or financial data is involved) freeze your credit and monitor your accounts.
Sources & References
Every claim on this page is traceable. This breach draws on:
Breach Index
Breach Index
Cross-source
9ghz
Cross-source
BreachDirectory
Cross-source
BreachForums_Official_Index
Cross-source
Citadel.pw
Cross-source
Dehashed
Cross-source
HackNotice.com
Cross-source
Leak-Lookup
Cross-source
LeakBase.pw (+4)
ObscureIQ Intelligence
ObscureIQ proprietary analysis
Protect Yourself
Check If You're Affected
Enter your email to check whether your data appears in this breach. We’ll send a 6-digit code to confirm it’s your address.
Get Free Breach Alerts
Be the first to know when new breaches are disclosed. Free forever — confirm your email with a 6-digit code.
High-Risk? Get an Exposure Audit
Executives, public figures, and high-visibility operators can receive tailored exposure intelligence and hardening guidance.
Request Consultation