Breachesby GlyphLumin PDF
Disclosed Sep 18, 201915,453,048 accountsUnverified
In April 2019, the PDF management service Lumin PDF suffered a data breach . The breach wasn't publicly disclosed until September when 15.5M records of user data appeared for download on a popular hacking forum. The data had been left publicly exposed in a MongoDB instance after which Lumin PDF was allegedly been "contacted multiple times, but ignored all the queries". The exposed data included names, email addresses, genders, spoken language and either a bcrypt password hash or Google auth token.
What is known
| People affected | 15,453,048 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Sep 18, 2019 |
| Happened | Apr 1, 2019 |
| Attack | Hacking |
| Data exposed | Credentials and tokensEmailsNamesPasswordsDates of birth |
| Sector | Tech |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
Notices filed
History of this record
First recordedby backfillSource
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.