Display names leaked: what it means and what to do
Risk level: low. Can you change it: yes. Found in 5 breaches in this directory.
What this data is
The name shown to other users on your profile, which may be your real name, a nickname or a handle you chose for a game, forum or app.
The risk on its own
Low risk. Display names were usually visible to other users, so the breach rarely reveals anything new. A nickname on its own is mostly harmless.
The risk combined with other data
The real issue is reuse. A distinctive name used on several sites lets anyone search it and find your other accounts, which can link a private gaming or dating profile to your professional identity. Joined to the email address in the breach, it confirms exactly who is behind the name.
How criminals use it
Someone searches your unique gamer tag and finds your social media, school and hometown.
An impersonator registers your display name on another platform and messages your friends.
A harasser uses the display name and email from the breach to confirm your real identity.
What to do now
Search your display name in a search engine to see which accounts it connects.
Use different display names for accounts you want kept separate, especially dating, gaming and anonymous forum accounts.
Change the password on the breached account and anywhere you reused it.
Report impersonation accounts to the platform using its impersonation report form.
Frequently asked questions
Is a leaked display name a problem?
Rarely on its own. It matters when the same distinctive name links accounts you want kept apart.
Should I change my display name?
Only if it is your real name on an account you wanted anonymous, or if you use it everywhere and want your accounts less connected.
Can someone log in with my display name?
Not without the password. Some sites use it as the username, so a strong unique password and two-factor authentication still matter.
Breach data sourced from Have I Been Pwned, used under CC BY 4.0. Additional breach metadata provided by XposedOrNot. DataExposed is an independent service and is not affiliated with or endorsed by either.