Data Breach on September 25, 2025
| Data Breach Report | |||
|---|---|---|---|
| Victim | wechat.com | ||
| Threat Actor | Miga | ||
| Date Discovered | Sep 25, 2025 | ||
| Description | WeChat is a messaging, social media, and payment platform based in China, providing chat, mobile payments, mini-programs, and social networking services. | ||
| Leak Size | Unknown |
Credential Exposure for wechat.com
We've indexed 655 @wechat.com accounts from external breaches, plus 2,804 credentials for wechat.com itself.
Last checked Aug 16, 2026
| @wechat.com addresses from external breaches | |
|---|---|
| Third-party breaches | 592 accounts · across 41 breaches · 49 with a plaintext password · most recent Dec 18, 2025 |
| Combo lists | 50 accounts · most recent Aug 6, 2026 |
| Phishing pages | 21 accounts · most recent Aug 12, 2026 |
| Passwords for wechat.com accounts | |
|---|---|
| Combo lists | 2,367 logins · most recent Aug 15, 2026 |
| Infostealer logs | 677 logins · 959 infected devices · most recent Aug 8, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
WeChat was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.