Hana-cupid discloses a member-data breach potentially affecting 4.24 million records
Hana-cupid confirms member-data leakage. Up to 4,238,242 records may be affected, including login IDs, email addresses and protected passwords. Payment details are excluded.
- Disclosed
- Oct 28, 2026
- Public disclosure date
- Severity
- Septic Tank Blew
- No CVE: a breach, not a bug
- Splash zone
- Internet Hana-cupid and Business Hana-cupid members registered directly with an email address
- Hana-cupid · data breach · credentials
- In the wild
- Yes
- The operator confirms unauthorized access and data leakage.
What happened
The operator says passwords were stored irreversibly, but does not identify the algorithm or parameters. It recommends password changes and reports no confirmed secondary misuse. Names, addresses, phone numbers and card data are excluded. Attack paths were blocked; investigation continues. L4 reflects the scale of the credential-data exposure.
Crime-scene timeline
Oct 14–15, 2026
Unauthorized access occurs
Oct 19, 2026
Investigation confirms leakage
Oct 28, 2026
Public notice and customer notifications begin
Who said what
We list each claim and who made it. Primary sources (the vendor, the researcher, the registry) are marked. Where reports disagree, we grade by the worst credible case.
- Hana-cupid breach notice and FAQPrimaryConfirms leakage; the published count is potentially affected records, not independently verified unique victims.