Data breach at "Lumin PDF"

  1. Home
  2. Lumin PDF
← Go back to Data Breaches list
Lumin PDF
LuminPDF
http://luminpdf.com
Date
Description
In April 2019, the PDF management service Lumin PDF suffered a data breach. The breach wasn't publicly disclosed until September when 15.5M records of user data appeared for download on a popular hacking forum. The data had been left publicly exposed in a MongoDB instance after which Lumin PDF was allegedly been "contacted multiple times, but ignored all the queries". The exposed data included names, email addresses, genders, spoken language and either a bcrypt password hash or Google auth token. The data was provided to HIBP by a source who requested it be attributed to "JimScott.Sec@protonmail.com".
Amount of leaked user accounts
15453048
Leaked Data
Auth tokens, Email addresses, Genders, Names, Passwords, Spoken languages, Usernames