yue.com

In early 2020, data belonging to roughly one million users of yue.com surfaced in a credential leak indexed by the investigation team. The listing covers 1,005,123 rows of user records, with email addresses present for all of them and passwords present for 995,367 of them. The team estimates the breach date as January 1, 2020, and the listing was added to the index on December 1, 2024. No threat actor has publicly claimed responsibility for the leak.

Limited public reporting: As of September 25, 2026, detailed company notices or major news coverage for this listing were limited in sources reviewed. The facts below rely primarily on the indexed fields plus any secondary sources cited.

Public information about yue.com itself and about the circumstances of this leak is scarce. Independent breach-tracking service Leak-Lookup has separately listed yue.com data in its breach database, which suggests user credentials from the site have circulated in leak collections, though that listing is dated differently from the 2020 records in this index. The exact method of the compromise, whether it was a direct intrusion of the site's servers or the harvesting of credentials from another source, has not been confirmed in public reporting reviewed for this article.

What Information Was Compromised?

Our analysis found the following data types in this breach: email addresses and passwords.

The password field appeared in 995,367 of the 1,005,123 rows, meaning a small number of records contained an email address without an associated password. The listing does not break the records down further, so it is not known whether names, phone numbers, payment details, or other account information were included.

Not every individual is affected by every type of data listed here.

What Are the Potential Risks for Affected Individuals?

Exposed email and password combinations are most dangerous when people reuse passwords across services. Attackers routinely feed leaked credential lists into automated "credential stuffing" tools, which try the same email and password pairs on banking sites, email providers, shopping accounts, and social media. If a user had the same password on yue.com as elsewhere, those other accounts are at risk.

Even without password reuse, a confirmed email address in a leak database makes a person a stronger target for phishing. Scammers who know an address appears in a breach often send convincing messages about "security alerts" or password resets designed to steal more information.

What Should You Do If You Were Affected?

Change your password on yue.com, if you still have an account there, and on any other site where you used the same or a similar password.

Turn on two-factor authentication wherever it is offered, starting with your email account, which controls password resets for almost everything else.

Check whether your email address appears in this or other breach listings so you know which accounts to prioritize.

Be cautious with unsolicited emails referencing yue.com or claiming your account was compromised. Do not click links or enter credentials through messages you did not initiate.

Watch your financial and email accounts for unusual activity over the following months, since leaked credentials are often used long after a breach is first reported.

Because this listing was indexed in late 2024 based on data estimated to date from January 2020, some affected users may have already changed their passwords without knowing why. Doing so again, and enabling two-factor authentication if you have not, remains the most effective step available.