Risk level: high. Can you change it: no. Found in 2 breaches in this directory.
What this data is
Answers or records about recreational or prescription drug use, stored by dating apps, harm reduction and health apps, surveys, insurers, treatment services and sometimes workplace drug testing providers.
The risk on its own
Drug use information is sensitive in a way most lifestyle data is not, because in many places the behaviour is illegal or grounds for losing a job, a visa or custody. Where it comes from a treatment or testing service, it is also protected health information. Once shared, it cannot be retracted.
The risk combined with other data
Tied to your name and employer, it becomes leverage for extortion and a tool for discrimination. A leaked test result or treatment record can affect employment, professional registration, visa applications and family court matters. People in recovery can also face stigma and contact from people in their past.
How criminals use it
An extortionist threatens to send your drug use answers or treatment record to your employer or professional body.
A former partner uses leaked records against you in a custody dispute.
A person in recovery is contacted by dealers or old associates who found them through the leak.
Leaked answers are used to screen you out of a job or to reprice insurance.
What to do now
Ask the service exactly what was exposed, and whether it included test results, prescriptions or treatment notes.
Do not pay or reply to extortion. Keep the messages and report them to police.
If the record could affect a visa, a professional registration or a court matter, get independent legal advice before discussing it with anyone involved.
If you are in treatment, tell your provider so they can support you and record the breach.
Remove drug and alcohol answers from dating and social profiles, and skip those questions in future where they are optional.
Complain to the privacy regulator if a health or treatment service lost the data.
Frequently asked questions
Can police use leaked drug use answers against me?
Leaked survey or app answers are rarely a basis for charges on their own, but laws and practice vary. If you are worried about a specific situation, get legal advice.
Are drug treatment records confidential?
Yes. In the US, 42 CFR Part 2 gives substance use treatment records extra protection, and health privacy laws in Australia, the UK and Europe treat them as sensitive.
Someone is threatening to tell my employer. What now?
Do not pay. Stop engaging, save the evidence and report it to police. Paying rarely ends the demands.
Breaches that exposed this data
Mate1.com: 2016-02-29, 27M accounts, Astrological signs, Dates of birth, Drinking habits, Drug habits, Education levels, Email addresses
MeetMindful: 2020-01-26, 1.4M accounts, Dates of birth, Drinking habits, Drug habits, Email addresses, Genders, Geographic locations
Breach data sourced from Have I Been Pwned, used under CC BY 4.0. Additional breach metadata provided by XposedOrNot. DataExposed is an independent service and is not affiliated with or endorsed by either.