LiveBreach Intelligence: data breaches, leaks & ransomware, tracked as they surfaceOngoing protection: GalaxyWarden →
Recent BreachesData breach tracker

Recent Breaches › Liker Data Breach (2021)

HIGH severityConfirmedHow we verify

Liker Data Breach (2021): What Was Exposed & What To Do

RBRecent Breaches Breach Intelligence·March 8, 2021

SourceBreach data provided in part by Have I Been Pwned, used under CC BY 4.0.

Liker Data Breach (2021)

Reported March 8, 2021. Approximately 465K people affected.

HIGH
Severity
465K
People affected
13
Data types exposed
March 8, 2021
Disclosed
ShareXLinkedInFacebookRedditWhatsAppTelegram

The Liker Data Breach (2021) (reported March 8, 2021) exposed Auth tokens, Dates of birth, Education levels and Email addresses belonging to roughly 465K people. If you have an account with them, your information may now be circulating on the open web and with data brokers. Here’s exactly what happened, how to check if you were affected, and what to do next.

Severity & verification
HIGH severityConfirmed
Account credentials exposed.
Corroborated by an official disclosure or a verified breach feed.
Was your email in the Liker Data Breach (2021) breach?
465K accounts were exposed here. See if yours is one — and every other breach it’s in. 15-sec check, no card.

By running your scan you agree to the Terms and Conditions and the Privacy Policy, and to GalaxyWarden emailing you the results of this scan.

In March 2021, a data breach at Liker exposed information belonging to 465,000 individuals. The incident was reported on March 8, 2021, and involved the disclosure of email addresses along with names, dates of birth, education levels, geographic locations, IP addresses, passwords, and other personal attributes. The platform remained offline following the event, and the organisation did not respond to inquiries about the incident. Social media platforms continue to face repeated targeting because they store large volumes of user credentials and profile data that retain value on underground markets. This case illustrates the ongoing exposure of authentication tokens and plaintext security details even when passwords receive hashing.

Inside the incident

Public reporting states that the breach occurred at Liker, described as a self-proclaimed kinder and smarter social network. The disclosed records included 465,000 email addresses together with names, dates of birth, education levels, geographic locations, IP addresses, authentication tokens, and passwords. Additional attributes mentioned in the same reports include private messages and security questions stored in plaintext. No confirmed timeline for initial access or details on the method of intrusion have been released. The site stayed offline after the event became public.

How a breach like this happens

Incidents affecting social platforms often begin with the compromise of an internet-facing server or application through unpatched software, weak authentication controls, or stolen administrative credentials. Once inside, attackers may locate databases containing user records and extract them in bulk. In some cases the data later appears on public forums or leak sites, sometimes accompanied by claims of motive such as retaliation for prior incidents involving other platforms. Exact vectors remain undisclosed in this instance.

About Liker

Liker operated as a social networking service that collected standard user profile information to enable connections and content sharing. Organisations in this sector routinely hold account credentials, contact details, and demographic fields supplied during registration or profile completion. A breach at such a service is consequential because the data can support further account takeovers or targeted social-engineering attempts against the same users on other sites.

What data was at risk

Named data types reported as exposed include authentication tokens, dates of birth, education levels, email addresses, geographic locations, IP addresses, names, and passwords. Additional attributes referenced in coverage include private messages and security questions and answers stored in plaintext, with passwords protected only by bcrypt hashing. The precise contents of every record and the full scope of any additional fields remain unconfirmed beyond these descriptions.

Why it matters

Exposed email addresses and names can facilitate phishing campaigns or account-recovery abuse on other services. Dates of birth and education details add to identity-verification data that may be used in fraud attempts. Plaintext security questions reduce the effectiveness of password resets, while authentication tokens could allow direct session access if still valid. Hashed passwords limit immediate use but still require users to change credentials elsewhere if reuse occurred. For the organisation, prolonged downtime and lack of public response can erode user trust and complicate future recovery efforts.

If your data was in this breach

Individuals should change passwords on Liker and any other accounts that share the same or similar credentials. Enable multi-factor authentication wherever available and review recent login activity for signs of unauthorised access. Monitor email accounts for unexpected password-reset requests or phishing messages that reference the exposed details. Readers can run a free exposure scan of their email address to check whether their information has surfaced in known breach data.

AICompiled with AI assistance from public sources and published under our editorial standards.

Editorial & sourcing policy
Recent Breaches is a breach-monitoring service and news aggregator. We do not exfiltrate, host, purchase, or redistribute stolen data, and we do not hold the data claimed in leak-site listings. Incidents are compiled from publicly accessible sources and threat-intelligence platforms and are reported as claims attributed to their source. We promptly correct or remove material shown to be inaccurate — write to support@galaxywarden.com or press@recentbreaches.com.
Check if you’re exposed →

How this breach connects

Company

Method

CompanyLiker security record
74/100
DoxxScan™ · Moderate doxx risk
B- 78Above-average record

1 reported incident on record.

See Liker’s full breach history →

More recent breaches

Carding Mafia (December 2021) Data Breach (2021)December 28, 2021FlexBooker Data Breach (2021)December 23, 2021RedLine Stealer Data Breach (2021)December 5, 2021Aditya Birla Fashion and Retail Data Breach (2021)December 1, 2021

Latest breaches

Read GalaxyWarden’s full analysis of the Liker Data Breach (2021) →

Verified breach. Breach data provided in part by Have I Been Pwned, used under CC BY 4.0.

Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.

Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.

ShareXLinkedInFacebookRedditWhatsAppTelegram