Read Novel Data Breach (2019): What Was Exposed & What To Do

In May 2019, reports indicated that the Chinese literature website Read Novel had suffered a data breach exposing records associated with 22.4 million users. The incident involved email addresses along with usernames, genders, phone numbers, and passwords stored as salted MD5 hashes. Such events remain common in the broader landscape of online services that store account credentials and personal identifiers, where large-scale exposures continue to surface through public data repositories. The breach was first noted publicly on 1 May 2019. Available details state that 22.4 million unique email addresses were affected, together with the additional fields listed above. No further information on the method of access, the precise timing of the intrusion, or any subsequent actions by the organisation has been disclosed in the reporting.

Inside the incident

The reported exposure occurred at Read Novel, a platform described as a Chinese literature website. Public records attribute the discovery to listings that appeared in May 2019 and reference 22.4 million affected records. The data types explicitly named are limited to those already stated; any additional fields or context remain unconfirmed.

How a breach like this happens

Incidents involving the exposure of user credentials and contact details often begin with unauthorised access to an organisation’s systems. Attackers may exploit vulnerabilities in web applications, compromised administrative credentials, or misconfigured databases to extract stored information. Once obtained, the data can be copied and later circulated through online forums or breach repositories. Passwords hashed with older algorithms such as MD5, even when salted, remain subject to offline cracking attempts if the hashes themselves are disclosed.

Who is Read Novel?

Read Novel operates as an online platform offering Chinese literature content to registered users. Services of this type routinely maintain accounts that include email addresses, usernames, and contact numbers to support registration, login, and communication. A breach at such a site can therefore involve the types of identifiers that users rely on across multiple online services.

The information in question

The facts associated with the incident name the following data elements: email addresses, usernames, genders, phone numbers, and passwords stored as salted MD5 hashes. The exact scope of any additional information that may have been present in the affected systems has not been confirmed publicly.

Why it matters

Exposed email addresses and phone numbers can be used for targeted phishing or unwanted contact. Usernames and gender data add context that may assist in linking records across different platforms. Password hashes, even when processed with a salt, can be subjected to computational attacks; users who reused those passwords on other sites face a corresponding risk of account compromise elsewhere. For the organisation, the incident underscores the long-term consequences of retaining user data in older hash formats.

What to do if you're exposed

Individuals who suspect their information may be involved should change passwords on Read Novel and any other accounts where the same credentials were used. Enabling multi-factor authentication provides an additional layer of protection. Readers can run a free exposure scan of their email address against known breach data to determine whether their details appear in publicly reported incidents.

AICompiled with AI assistance from public sources and published under our editorial standards.