HIGH SEVERITYStreaming

YouNow Data Breach

YouNow Live Streaming Platform Breach (2019): 18 Million User Accounts Including Social Media Profiles Exposed

Live streaming platform.

Verified by ObscureIQ Intelligence

6.5Severity
18.2MRecords
5Fields
2019Year

ObscureIQ Breach Intelligence Scores
0.5
Breach Risk Index
5
Data Value
10
Market Recency
2475
days
Since Breach

Risk Interpretation

High risk of harassment, stalking, account takeover, and identity linkage. Live-streaming context can also expose minors, creator-fan relationships, and real-time behavioral patterns.

🎯 Impact & Downstream Threats

In February 2019 data from YouNow appeared for sale on a dark web marketplace. The exact date of the underlying breach is unclear. The exposed dataset contained approximately 18 million unique email addresses alongside IP addresses, names, usernames, and links to connected social media profiles. Because YouNow uses social provider authentication, no passwords were stored or exposed. YouNow acknowledged the incident. No settlement or regulatory enforcement action specific to this breach has been

Primary downstream threats:
  • Targeted phishing campaigns using exposed email addresses
  • Social media account targeting and impersonation

🔓 Threat Vectors

Phishing, credential stuffing & account takeover
Name-based social engineering
Geolocation & account flagging
Account impersonation & social graph harvesting
Cross-platform tracking & credential stuffing

📋 Breach Intelligence

EntityYouNow
OrganizationPrivate Company • USA / Global
Breach Date2019-02-01
HIBP Added2019-07-18
Records~18.2M (18,200,000 records)
Attack VectorMisconfiguration
Data SubjectsUser
Breach PathwayDirect
SourceHave I Been Pwned / DataBreach.com / ObscureIQ
SensitivityStandard
Breach ID1523;1522
StatusConfirmed

📝 Executive Summary

YouNow, the live streaming platform, suffered a data breach that exposed information on approximately 18.2 million user accounts. The data appeared for sale on a dark web marketplace in February 2019, though the date of the underlying intrusion is unknown. The breach is attributed to a misconfiguration rather than an external hack. Because YouNow authenticates users through social media providers rather than its own password system, no passwords were included in the exposed data. The compromised dataset contained email addresses, IP addresses, names, usernames, and links to connected social media profiles. The combination of these fields is particularly sensitive given YouNow's young user base. IP addresses can reveal approximate physical locations, and social media profile links make it straightforward to connect an exposed record to a real person's broader online presence. This creates a meaningful risk of stalking, harassment, and identity linkage for affected users. YouNow acknowledged the incident, but no regulatory enforcement action or legal settlement has been publicly documented in connection with this breach. Affected individuals should be alert to phishing attempts that reference their username or platform activity, and review whether their connected social media accounts show any signs of unauthorized access. The exposure of real identities alongside platform activity is of particular concern for younger users and creators with established fan relationships.

🏢 About YouNow

YouNow is a live streaming platform that allows users to broadcast video in real time while viewers interact through comments and virtual gifting. The platform was launched in 2011 and has attracted a largely young user base interested in live entertainment, music performance, and social interaction. YouNow authenticates users through social media providers rather than standalone passwords.

Platform | Live streaming and social interaction | Creator platform | Global
Private CompanyUSA / Globalyounow.com

🗂 Why They Hold Your Data

Live-streaming platforms collect user accounts, profile data, messages, social relationships, payment-adjacent records, and content-creation activity tied to real-time social broadcasting.

📰 Recent Developments

YouNow continues to operate as a live streaming platform, though its cultural prominence has diminished relative to the peak of live streaming growth. Competition from TikTok Live, Instagram Live, and YouTube has compressed the market for independent live streaming services. No major organizational changes have been publicly reported.

🔍 Data Points Exposed

5 verified field types:
Email
IP addresses
Names
Social media profiles
Usernames;IP Address
Email
Name

Canonical Fields

email_address, full_name, ip_address, social_media_profile, username

🌐 Dark Web Verification

Confirmed
  • Dataset containing ~18.2M records identified in breach intelligence sources
  • Data indexed and searchable across breach notification platforms
  • Source: YouNow Data Breach;younow.com-2019

🛡 Recommended Actions

⚠️ Do not assume this is low sensitivity.

1Freeze Your Credit
Place a credit freeze with Equifax, Experian, and TransUnion.
2Expect Targeted Phishing
Watch for emails referencing this breach. Verify through official channels.
3Enable MFA Everywhere
Enable multi-factor authentication on all accounts.
4Monitor Accounts
Watch for unauthorized activity on financial and personal accounts.
5Check Your Exposure
ObscureIQ clients: this breach is indexed in your profile.

Protect Yourself

Check If You’re Affected

Enter your email to check if your data appears in this breach.

Get Free Breach Alerts

Be the first to know when new breaches are disclosed.

High-Risk? Get an Exposure Audit

Full-spectrum exposure audits for executives and public figures.

Request Consultation

ObscureIQ Advisory

We combine proprietary dark web access with commercial and restricted breach intelligence to verify exposure and assess real-world risk.

If you are:
  • A public-facing individual
  • A high-profile executive
  • A customer of YouNow
  • Or concerned about credential reuse
Services
AuditsWipesThreat MonitoringTraining

Classification Tags

MisconfigurationStreamingEmail

Powered by the ObscureIQ Breach Intelligence Database

© 2026 ObscureIQ · All Rights Reserved · Data Licensing

Latest from ObscureIQ

Credit

What Is Credit Monitoring? And Do I Want It? (Answer: Not Really)

July 14, 2025
Every time there’s a major data breach, companies scramble to offer “free” credit monitoring. It sounds like a responsible move.…
breach economycredit freezecredit scoreequifaxexperian
Credible Threats

Lock Down Browsers. Wipe Employee Footprints. Win Breach Wars.

September 2, 2025
Lock Down Browsers. Wipe Employee Footprints. Win Breach Wars. Over 80% of security incidents now start in the browser. Chrome.…
brave browserbreachesbrowser exploitbrowserschrome
Analysis

Sextortion Spam

May 10, 2025
Sextortion scams aren’t new, but they remain one of the most effective forms of cyber-enabled fraud. These scams don’t rely…
bitcoindeadlinefeargoogle maps apiransom