Youthmanual data breach: 937K accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2025-02-09
In January 2019, the Indonesian college and career platform Youthmanual suffered a data breach that exposed 1.1M records of data. The breached included 938k unique email addresses along with extensive personal information including names, genders, dates and places of birth, phone numbers, physical addresses and salted SHA-1 password hashes. Exposed data: bios, dates of birth, email addresses, genders, names, passwords, phone numbers, physical addresses, places of birth. The breach dates from Jan 31, 2019; Have I Been Pwned loaded it on Feb 9, 2025.
What to do
- If you had a Youthmanual account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
