IndiHome data breach: 12.6M accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2023-11-27
In mid-2021, reports emerged of a data breach of Indonesia's telecommunications company, IndiHome. Over 26M rows of data alleged to have been sourced from the company was posted to a popular hacking forum and contained 12.6M unique email addresses alongside names, IP addresses, genders and geographic locations. The most recent data was stamped as being recorded in November 2019. Exposed data: device information, email addresses, genders, geographic locations, ip addresses, names. The breach dates from Nov 1, 2019; Have I Been Pwned loaded it on Nov 27, 2023.
What to do
- If you had a IndiHome account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
Sources
All live incidents on Threat Watch