Private messages leaked: what it means and what to do
Risk level: high. Can you change it: no. Found in 39 breaches in this directory.
What this data is
Direct messages, chats and inbox conversations on a platform, which can include photos, links, attachments, addresses, phone numbers and details you shared expecting only one person to read.
The risk on its own
Private messages often contain the most sensitive things people ever write down: relationship details, money problems, health issues, passwords and photos. They cannot be taken back once leaked. Context is lost, so ordinary messages can be made to look damaging.
The risk combined with other data
With your name and email address, leaked messages are powerful extortion material and a guide to your relationships. Scammers can copy your writing style and refer to real conversations to impersonate you or your contacts. Any passwords, account numbers or addresses shared in chat are exposed as well.
How criminals use it
An extortionist threatens to send your private conversations to your partner or employer unless you pay.
A scammer impersonates a friend, referring to real past chats to request money.
Passwords or bank details you once sent in a message are used to access accounts.
Messages from a dating or adult platform are used to publicly shame you.
What to do now
Search your messages on the breached service for passwords, card numbers and addresses, and change anything you find.
Do not pay extortion demands. Keep the evidence, stop replying and report to police.
Warn close contacts that someone may impersonate you using details from your conversations.
Change the account password, sign out of other sessions and turn on two-factor authentication.
Delete old conversations you do not need and use an end to end encrypted messenger for sensitive chats.
Delete the account if you no longer use the service.
Frequently asked questions
Can I get leaked messages removed?
You can report posts that publish them and request search engine removal, but copies already shared privately may remain.
Does end to end encryption prevent this?
It stops the service reading messages on its servers, which makes server breaches far less damaging. It does not help if your device or account is compromised.
Someone is threatening to publish my chats. Should I pay?
No. Payment rarely ends the threat. Save everything, block the sender, and report it to police and the platform.
Breach data sourced from Have I Been Pwned, used under CC BY 4.0. Additional breach metadata provided by XposedOrNot. DataExposed is an independent service and is not affiliated with or endorsed by either.