Brand New Tube Data Breach (2022)

On August 14, 2022, Brand New Tube appeared in a public breach notification after attackers compromised the streaming platform and stole the records of nearly 350,000 subscribers. The exposed information includes email addresses, usernames, genders, IP addresses, unsalted SHA-1 password hashes, and private messages sent through the site.

Confirmed Breach Details

The primary disclosure from Have I Been Pwned states that the incident occurred in 2022 and that the compromised database contained 350,000 records. It confirms the specific data types listed above and notes that passwords were stored as unsalted SHA-1 hashes, a weak format that allows rapid cracking with modern hardware. The notification does not specify the exact attack vector or whether the breach resulted from ransomware, but the presence of private messages alongside credentials points to broad database access by the intruder.

No ransom demand or extortion leak-site listing has been publicly tied to this incident, distinguishing it from many 2022 breaches that followed the double-extortion model. The platform, which positioned itself as an alternative video-hosting service, did not issue its own detailed customer notification that quantified impact or provided individualized alerts, leaving most affected users to discover the breach through third-party monitoring.

Why This Matters for You and Your Family

If you or anyone in your household used Brand New Tube, your email address, username, and password hash are now permanently available to criminals. Because many people reuse the same password across services, a single cracked hash can hand attackers the keys to your email, social media, or banking accounts. IP addresses in the dump also narrow down your likely geographic location at the time of activity, while private messages can reveal personal details you never intended to share publicly.

Genders and usernames further enrich profiling attempts. When combined with data from other breaches, this information helps scammers build convincing impersonation attacks or targeted phishing emails that reference your past video-watching habits or comments. Children or teenagers who created accounts on the platform may have used family email addresses, extending the exposure to younger members of the household who are less likely to monitor old accounts.

Doxxing and Identity-Chain Risks

The combination of email addresses, unsalted password hashes, IP logs, and private messages creates a classic doxxing starter pack. Once a threat actor cracks even a fraction of those SHA-1 hashes, they can test the credentials on dozens of other sites within hours. Successful logins then yield new data that links back to your real-world identity, phone numbers, or home address. Private messages sometimes contain exactly the kind of personal anecdotes or contact details that accelerate this chaining process.

Credential leaks like this one cascade into account takeovers and doxxing chains, especially for gaming accounts that often share the same email or password patterns used on video platforms. A teenager’s old Brand New Tube login could become the bridge that lets an attacker seize a Roblox, Discord, or Steam account tied to the same address, exposing friends lists, voice-chat history, and additional personal information.

What to Do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup of exposed records.
• Rotate the password you used on Brand New Tube anywhere it is reused and switch to a unique passphrase for every important account.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure is caught in hours rather than months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that chain back to the same email or address.
• Let remediation specialists handle takedown requests across data-broker sites and underground forums where your information is being traded.

The Brand New Tube breach demonstrates how even medium-sized platforms continue to expose families years after the initial incident. Old accounts you no longer use can still open the door to new compromises. Start your DoxxScan trial today for continuous monitoring, AI-powered identity-chain mapping, and hands-on remediation by specialists that protects both you and your family, including children’s gaming accounts vulnerable to credential-stuffing attacks.