Breach Intelligence

6,872

Total breached databases

intime.co.id 2022

intime.co.id 2022

In 2022, the Indonesian luxury watch retailer INTime (intime.co.id) allegedly suffered a data breach. INTime is an online and retail seller of high-end watch brands operated by Time International. Reports suggest the exposed data, drawn from the site's WordPress/WooCommerce database, covered approximately 24,000 individuals and included email addresses, names, usernames, phone numbers, genders, geographic and site-activity information, and passwords stored as PHPass hashes.
  • Date: 2022
  • Domain: intime.co.id
  • Country: Indonesia
  • Category: E-commerce & Retail
  • Data: Email Addresses Passwords Names Phone Numbers Geographic Locations Usernames Genders Site Activity
  • Records: 109,976
  • Lines: 400,527
  • Size: 156.74 MB
  • Passwords: PHPass
  • Cracked: 0%
ibm.ac.id 2022

ibm.ac.id 2022

In December 2022, the e-learning platform of Institut Bisnis Muhammadiyah Bekasi (ibm.ac.id), an Indonesian private business college, allegedly suffered a data breach. Reports suggest the exposed Moodle database contained records for approximately 100 individuals. The compromised data reportedly included email addresses, usernames, full names, BCrypt-hashed passwords, IP addresses, and geographic location information.
  • Date: Dec 29, 2022
  • Domain: ibm.ac.id
  • Country: Indonesia
  • Category: Education
  • Data: Email Addresses Passwords Names Geographic Locations Usernames IP Addresses
  • Records: 126
  • Lines: 61,536
  • Size: 7.98 MB
  • Passwords: BCrypt
  • Cracked: 0%
hayyu.co.id 2021

hayyu.co.id 2021

Sensitive
Sometime around late 2021, Hayyu (hayyu.co.id), an Indonesian sharia-compliant skincare and beauty clinic operating an appointment and e-commerce platform, allegedly suffered a data breach. Reports suggest a database containing approximately 25,000 records was exposed, affecting roughly 12,000 individuals. The compromised data allegedly included email addresses, names, phone numbers, birthdates, usernames, geographic locations, site activity, and passwords stored as SHA-1 hashes.
  • Date: 2021
  • Domain: hayyu.co.id
  • Country: Indonesia
  • Category: Healthcare
  • Data: Email Addresses Passwords Names Phone Numbers Geographic Locations Usernames Site Activity Birthdates
  • Records: 24,924
  • Lines: 1,084,566
  • Size: 163.66 MB
  • Passwords: SHA-1
  • Cracked: 0%

gpsfinance.co.id 2022

In 2022, GPSFinance (gpsfinance.co.id), an Indonesian vehicle- and consumer-financing provider operating across North Sumatra, allegedly suffered a data breach. Reports suggest approximately 16,000 records were exposed, including customers' full names, phone numbers, physical addresses, dates of birth, birthplaces, Indonesian government ID (KTP) numbers, occupation and employer details, and financed-vehicle information such as models and license-plate numbers. A small number of staff accounts were also exposed with passwords stored as MD5 hashes, alongside a handful of plaintext session credentials.
  • Data: Passwords Names Phone Numbers Geographic Locations Usernames Government IDs IP Addresses Job Information Company Information Birthdates License Plate Numbers Vehicle Information
  • Records: 16,653
  • Lines: 1,692,572
  • Size: 217.3 MB
  • Passwords: MD5, Plaintext

grand-optik.com 2023

Sometime in or before 2023, Grand Optik (grand-optik.com) allegedly suffered a data breach. Grand Optik is an Indonesian optical retailer selling eyewear, frames, and contact lenses, based in Yogyakarta. Reports suggest the exposed database contained approximately 18,000 individual records, including email addresses, names, phone numbers, dates of birth, physical addresses, government ID numbers, genders, and passwords stored as bcrypt and SHA-1 hashes.
  • Date: 2023
  • Domain: grand-optik.com
  • Country: Indonesia
  • Category: E-commerce & Retail
  • Data: Email Addresses Passwords Names Phone Numbers Geographic Locations Usernames Government IDs Genders Site Activity Company Information Birthdates
  • Records: 17,972
  • Lines: 1,156,404
  • Size: 136.52 MB
  • Passwords: BCrypt, SHA-1
  • Cracked: 0%

gojay.co.id 2023

Sometime before 2023, gojay.co.id allegedly suffered a data breach. Gojay is an Indonesian on-demand super-app offering ride-hailing, food and goods delivery, and local services such as lodging and courier bookings. It has been reported that the exposed database, which also bundled records from several other small Indonesian applications, contained data on approximately 500 individuals. The compromised information allegedly included email addresses, passwords (a mix of plaintext and BCrypt, MD5, SHA-1 and SHA-512 hashes), names, usernames, phone numbers, dates of birth, geographic locations, government ID numbers, bank account details, and IP addresses.
  • Date: 2023
  • Domain: gojay.co.id
  • Country: Indonesia
  • Category: Logistics & Transportation
  • Data: Email Addresses Passwords Names Phone Numbers Geographic Locations Usernames Bank Account Information Government IDs Genders IP Addresses Site Activity Company Information Birthdates
  • Records: 929
  • Lines: 233,876
  • Size: 24.39 MB
  • Passwords: BCrypt, SHA-512, MD5, SHA-1, Plaintext
garudacyber.co.id 2023

garudacyber.co.id 2023

In February 2023, Garuda Cyber Indonesia (garudacyber.co.id) allegedly suffered a data breach. Garuda Cyber Indonesia is an Indonesian software and IT services company that develops human-resources, campus, and business-management systems. It has been reported that databases from several of its internal and client applications were exposed. Reports suggest approximately 350 records were affected, including email addresses, usernames, full names, phone numbers, government ID numbers, birthdates, genders, religions, geographic locations, IP addresses, company information, and passwords stored as BCrypt, PHPass, and SHA-1 hashes.
  • Data: Email Addresses Passwords Names Phone Numbers Geographic Locations Usernames Government IDs Genders Religions IP Addresses Company Information Birthdates
  • Records: 349
  • Lines: 159,087
  • Size: 55.69 MB
  • Passwords: BCrypt, PHPass, SHA-1
  • Cracked: 0%

Frequently Asked Questions

A data breach is unauthorized access to data (often involving account takeover, malware, or misconfigured infrastructure). A data leak is exposure of data due to mistakes like public cloud storage, open databases, or accidental publishing. A database dump is a packaged dataset that may come from a breach, leak, scraping, or aggregation.

Change passwords for any affected accounts immediately, prioritizing email, banking, and any account that shares the same password. Enable multi-factor authentication wherever possible. Monitor your accounts for suspicious activity and consider placing a fraud alert or credit freeze if financial data was exposed.

Start with containment and verification: confirm what data was exposed, identify the entry point, rotate credentials (especially SSO, VPN, email), and enforce MFA. Then investigate affected systems, notify stakeholders as required, and harden controls to prevent recurrence. A structured incident response plan helps keep the work measurable and compliant.

Dark web monitoring helps you spot exposure signals early — before stolen data is widely reused for account takeover or targeted attacks. Monitoring complements vulnerability management by revealing when attackers already have leverage. Pair it with continuous attack surface monitoring and strong Asset Discovery to reduce blind spots.

Not always. Some datasets are old, incomplete, or derived from third parties. However, any exposure increases risk because credentials and personal data can be reused indefinitely. Treat it as a priority signal: rotate credentials, enforce MFA, review suspicious logins, and audit the systems that could have produced the data.

SynScan helps you connect the dots between attack surface exposure, vulnerabilities, and breach signals so you can prioritize remediation and reduce the chance of repeat incidents.