SwingManiacs Data Breach
The 2021 SwingManiacs data breach occurred in January 2021 when the student and administrative management database of SwingManiacs (swingmaniacs.com), a leading swing and lindy hop dance school network based in Spain (Barcelona and Madrid), was leaked online.
Exposed Data Types
7- Email addresses
- Names
- Phone numbers
- Physical addresses
- Passwords
- Government issued IDs
- Dates of birth
About This Breach
What information was affected in the SwingManiacs incident?
The leaked student records (alumnos.csv) and password analysis dataset (swingmaniacs_dehashed.txt) expose extensive personal records for 42,321 unique individuals, including:
- Personal and Identity Credentials: Full names and Spanish national identity numbers (DNI/NIE).
- Contact Data: Canonical email addresses and primary/secondary phone numbers.
- Geographic Information: Physical street addresses, postal codes, and registered cities.
- Authentication Secrets: MD5 password hashes and dehashed plaintext passwords.
- Demographic Records: Dates of birth, registration timestamps, and dance level classifications.
How many accounts were affected?
Rigorous RFC canonical parsing and deduplication confirmed 42,321 unique valid email addresses.
Technical analysis and security risks
The database dump shows that the internal student management system lacked field-level encryption for national identification numbers (DNI) and contact telemetry. Combined with plaintext password exposure from rainbow table dehashing, affected dancers face substantial risks of identity theft, targeted social engineering, and credential stuffing attacks.
Recommended actions for affected users
Users who registered with SwingManiacs should:
- Promptly change passwords across any personal accounts where their dance school password may have been reused.
- Remain vigilant against unsolicited emails, SMS messages, or phone calls referencing their personal details.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
