Kebocoran Data Indonesia

In November 2022, the Indonesian oil and gas company Pertamina suffered a data breach of their MyPertamina service . The incident exposed 44M records with 6M unique email addresses along with names, dates of birth, genders, physical addresses and purchases.

Data terdampak: Dates of birth · Email addresses · Genders · Names · Phone numbers · Physical addresses · …

In November 2021, the Indonesian real estate website Travelio suffered a data breach that exposed over 470k customer accounts . The data included email addresses, names, password hashes, phone numbers and for some accounts, dates of birth, physical address and Facebook auth tokens.

Data terdampak: Auth tokens · Dates of birth · Email addresses · Names · Passwords · Phone numbers · …

In July 2021, the Indonesian restaurant website Qraved suffered a data breach that was later redistributed as part of a larger corpus of data . The breach exposed almost 1M unique email addresses along with names, phone numbers, dates of birth and passwords stored as MD5 hashes.

Data terdampak: Dates of birth · Email addresses · Names · Passwords · Phone numbers

In July 2021, the online Indonesian watch store, Jam Tangan (AKA Machtwatch), suffered a data breach that exposed over 400k customer records which were subsequently posted to a popular hacking forum. The data included email and IP addresses, names, phone numbers, physical addresses and passwords stored as either unsalted MD5 or bcrypt hashes.

Data terdampak: Email addresses · IP addresses · Names · Passwords · Phone numbers · Physical addresses

In October 2020, news broke of Lazada RedMart data breach containing records as recent as July 2020 and being sold via an online marketplace. In all, the data contained 1.1 million customer email addresses alongside names, phone numbers, physical addresses, partial credit card numbers and passwords stored as SHA-1 hashes.

Data terdampak: Email addresses · Names · Partial credit card data · Passwords · Phone numbers · Physical addresses

In June 2020, the Indonesian credit service Kreditplus suffered a data breach which exposed 896k records containing 769k unique email addresses. The breach exposed extensive personal information including names, family makeup, information on spouses, income and expenses, religions and employment information. The data was provided to HIBP by breachbase.pw .

Data terdampak: Dates of birth · Email addresses · Employers · Family structure · Genders · Income levels · …

In April 2020, Indonesia's largest online store Tokopedia suffered a data breach . The incident resulted in 15M rows of data being posted to a popular hacking forum. An additional 76M rows were later provided to HIBP in July 2020. In total, the data included over 71M unique email addresses alongside names, genders, birth dates and passwords stored as SHA2-384 hashes.

Data terdampak: Dates of birth · Email addresses · Genders · Names · Passwords

In early 2020, the Indonesian consumer electronics website Bhinneka suffered a data breach that exposed almost 1.3M customer records . The data included email and physical addresses, names, genders, dates of birth, phone numbers and salted password hashes.

Data terdampak: Dates of birth · Email addresses · Genders · Names · Passwords · Phone numbers · …

In mid-2021, reports emerged of a data breach of Indonesia's telecommunications company, IndiHome . Over 26M rows of data alleged to have been sourced from the company was posted to a popular hacking forum and contained 12.6M unique email addresses alongside names, IP addresses, genders and geographic locations. The most recent data was stamped as being recorded in November 2019.

Data terdampak: Device information · Email addresses · Genders · Geographic locations · IP addresses · Names

In January 2019, the Indonesian college and career platform Youthmanual suffered a data breach that exposed 1.1M records of data . The breached included 938k unique email addresses along with extensive personal information including names, genders, dates and places of birth, phone numbers, physical addresses and salted SHA-1 password hashes.

Data terdampak: Bios · Dates of birth · Email addresses · Genders · Names · Passwords · …

In March 2019, the Indonesian e-commerce website Bukalapak discovered a data breach of the organisation's backups dating back to October 2017 . The incident exposed approximately 13 million unique email addresses alongside IP addresses, names and passwords stored as bcrypt and salted SHA-512 hashes.

Data terdampak: Email addresses · IP addresses · Names · Passwords · Usernames