Data breach
GFANgfan.com
22 526 334 accounts exposed in a breach dated 2016-10-10.
Breached2016-10-10Added to HIBP2016-10-10 UTCUpdated by HIBP2016-10-10 UTCAccounts22 526 334Domaingfan.com
Unverified
What happened in Have I Been Pwned’s words
In October 2016, data surfaced that was allegedly obtained from the Chinese website known as GFAN and contained 22.5M accounts. Whilst there is evidence that the data is legitimate, due to the difficulty of emphatically verifying the Chinese breach it has been flagged as "unverified". The data in the breach contains email and IP addresses, user names and salted and hashed passwords. Read more about Chinese data breaches in Have I Been Pwned.
Exposed data as HIBP classifies it
- Email addresses
- IP addresses
- Passwords
- Usernames
How HIBP qualifies it
- HIBP could not verify that the data came from this service.
Source: Have I Been Pwned (CC BY 4.0)
Copied from HIBP 2026-11-05 03:50 UTC