L
L
Breaches
1
1 verified
Records Exposed
15.5M
Total across all breaches
Data Types Leaked
7
1 high risk
Latest Breach
2019
LuminPDF

Breach History

LuminPDF
Apr 2019Critical
15.5M
Records exposed
7
Data types leaked
Verified
Status

In April 2019, the PDF management service Lumin PDF suffered a data breach. The breach wasn't publicly disclosed until September when 15.5M records of user data appeared for download on a popular hacking forum. The data had been left publicly exposed in a MongoDB instance after which Lumin PDF was allegedly been "contacted multiple times, but ignored all the queries". The exposed data included names, email addresses, genders, spoken language and either a bcrypt password hash or Google auth token.

Exposed Data Types
Auth tokensEmail addressesGendersNamesPasswordsSpoken languagesUsernames
Incident Status
Data breachYes
Data brokerNo
Policy contradictionsNo
Exposed Data Types
Auth tokensLow risk
Email addressesLow risk
GendersLow risk
NamesLow risk
PasswordsHigh risk
Spoken languagesLow risk
UsernamesLow risk