cheatportal.org

A large set of account records tied to the cheatportal.org domain has surfaced in public leak indexes, and the investigation team has added it to its breach database. The listing covers about 2.2 million rows, nearly all of them paired email addresses and passwords. No individual or group has publicly claimed responsibility for the underlying incident.

According to our investigation team, the breach involves 2,202,662 rows, of which 2,202,662 contain email addresses and 2,202,456 contain passwords. The team estimates the attack date as January 1, 2019, though this is an estimate and the exact circumstances of how the data was obtained are not confirmed. The listing was added to the database on February 12, 2025, meaning the records circulated for years before being catalogued here. Independent leak-tracking services also picked up the data: RansomLook and Leak-Lookup both list a cheatportal.org dataset of roughly 2.2 million entries with an October 2, 2019 detection date.

Limited public reporting: As of September 25, 2026, detailed company notices or major news coverage for this listing were limited in sources reviewed. The facts below rely primarily on the indexed fields plus any secondary sources cited.

What Information Was Compromised?

Our analysis found the following data types in this breach:

Email addresses (2,202,662 records)

Passwords (2,202,456 records)

Not every individual is affected by every type of data listed here.

What Are the Potential Risks for Affected Individuals?

Email and password combinations are the raw material for several common attacks:

Credential stuffing. Attackers feed leaked email and password pairs into login forms for other services. If you reused the same password on gaming accounts, social media, or email, those accounts are at risk.

Account takeover. Anyone still using a leaked password on a live account linked to that email could lose access to it, along with anything tied to it such as saved payment methods or personal messages.

Phishing. With a real email address in hand, scammers can send convincing messages that reference services you use, hoping to extract more details or additional passwords.

Follow-on breaches. A password leaked here can unlock accounts elsewhere, multiplying the damage beyond this one listing.

The practical risk depends heavily on whether the passwords were old, weak, or reused across sites.

What Should You Do If You Were Affected?

If your email appears in this dataset, take these steps:

Change your password anywhere you used the compromised password, starting with email, banking, and any account linked to that address.

Use unique passwords for every account. A password manager makes this manageable.

Turn on two-factor authentication wherever it is offered, especially for email, which can reset access to nearly everything else.

Watch for phishing. Be skeptical of unexpected emails referencing account problems or asking you to log in through a link.

Check whether other accounts are exposed.

Because the exact source and date of this dataset are not confirmed, treat any password you used around or before 2019 as potentially exposed.