1

Confirmed breach

1win data breach

Country being checked · 1win.com

A breach of 1win was added to Have I Been Pwned’s breach database on 3 February 2025. It affected 96,166,543 accounts. Exposed: Passwords and logins, Email addresses, Phone numbers, Dates of birth, IP addresses and Geographic locations. The breach began on 2 November 2024, 93 days before it was reported.

Status

Confirmed breach

People affected

96,166,543 accounts

Reported

3 February 2025

Breach began

2 November 2024

Time to tell

93 days (the median in California’s notices over the last year: 154 days)

What was exposed

• Passwords and logins
• Email addresses
• Phone numbers
• Dates of birth
• IP addresses
• Geographic locations

Sources

• Breach database · 3 February 2025 · 96,166,543 accountsHave I Been Pwned

Breach databases are read by code. · Corrections and changes

If 1win had your data

1. Look for 1win’s own notice or letter: it should say what of yours was involved. Keep it.
2. Change your 1win password, and the same password anywhere else you use it. Turn on two-step sign-in.
3. Expect scams that use your details: calls, texts or emails pretending to be 1win, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

• Spot the scams that use leaked data →
• If your password leaked →
• What to do after a data breach →

Email me if 1win has another breach

Alert me

One email to confirm first. We use your address only for this alert, and one click deletes it.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.