HIV statuses leaked: what it means and what to do

Risk level: critical. Can you change it: no. Found in 1 breaches in this directory.

What this data is

Information showing a person's HIV status, test results, viral load, PrEP use or treatment, held by clinics, pharmacies, testing services, research studies, health apps and dating apps that let users share their status.

The risk on its own

HIV status is one of the most sensitive facts a person can have disclosed, and it cannot be changed or taken back. Despite legal protections, disclosure can still bring stigma, rejection by family or community, workplace discrimination and, in some countries, criminal or immigration consequences. Even a record of PrEP use can be misread as a diagnosis.

The risk combined with other data

Linked to your name, photo or contact details, it can be used to out, extort or harass you. In countries that criminalise same-sex relationships or HIV, it can put a person's safety at serious risk. Dating app leaks that combine status with location and messages are especially dangerous.

How criminals use it

  • An extortionist threatens to tell your employer, family or community about your status unless you pay.
  • A former partner or acquaintance posts your status online to harass you.
  • A person in a country that criminalises same-sex relationships is identified from a dating app leak that included HIV status.
  • An employer or landlord who learns your status treats you unfairly.

What to do now

  1. Contact your clinic or a HIV support organisation for confidential advice, and ask the breached organisation exactly what was exposed.
  2. Do not pay or engage with anyone threatening disclosure. Keep the evidence and report it to police.
  3. If you face discrimination, contact a HIV legal service or your human rights or equality body. HIV is covered by disability discrimination law in Australia, the UK and the US.
  4. Complain to the privacy regulator: the OAIC in Australia, the ICO in the UK, or the HHS Office for Civil Rights for US health providers.
  5. Remove status information from dating profiles and delete old messages that mention it where the app allows.
  6. If you are in a country that criminalises HIV or same-sex relationships, get advice from a trusted local or international organisation before taking any public step.

Frequently asked questions

Is it legal for someone to share my HIV status?

Health providers and many other organisations are bound by strict confidentiality rules. Spreading a leaked status to harass or discriminate can also break privacy, discrimination or harassment laws.

Where can I get support?

Your HIV clinic, a local HIV organisation or a community health service can offer confidential support, and many can refer you to legal services that deal with disclosure and discrimination.

Can I be fired because my status leaked?

In Australia, the UK and the US, HIV is protected under disability discrimination law, so dismissal because of your status is generally unlawful. Get legal advice if it happens.

Breaches that exposed this data

  • CyberServe: 2021-10-29, 1.1M accounts, Dates of birth, Drinking habits, Email addresses, Family structure, Genders, Geographic locations

Tools that help

Related guides

Breach data sourced from Have I Been Pwned, used under CC BY 4.0. Additional breach metadata provided by XposedOrNot. DataExposed is an independent service and is not affiliated with or endorsed by either.