Bukalapak
Disclosed Apr 18, 20197 years ago13,369,666 accountsUnverified
In March 2019, the Indonesian e-commerce website Bukalapak discovered a data breach of the organisation's backups dating back to October 2017 . The incident exposed approximately 13 million unique email addresses alongside IP addresses, names and passwords stored as bcrypt and salted SHA-512 hashes.
What is known
| People affected | 13,369,666 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Apr 18, 2019 |
| Happened | Oct 23, 2017 |
| Attack | Not stated |
| Data exposed | Emails, IP addresses, Names, Passwords |
| Sector | Tech |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: Bukalapakhaveibeenpwned.com · Aggregator | Aggregator |
Notices filed
| Where | Filed | People |
|---|---|---|
| Have I Been Pwnedaccounts in the data | Apr 18, 2019 | 13,369,666 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.