What was exposed, when it happened, and which databases confirm it.
- accounts
- 13,369,666
- Breached
- October 23, 2017
- Last Update
- April 18, 2019
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In March 2019, the Indonesian e-commerce website Bukalapak discovered a data breach of the organisation's backups dating back to October 2017. The incident exposed approximately 13 million unique email addresses alongside IP addresses, names and passwords stored as bcrypt and salted SHA-512 hashes. The data was provided to HIBP by a source who requested it to be attributed to "Maxime Thalet".
Compromised Info
- Email addresses
- IP addresses
- Names
- Passwords
- Usernames
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- HIBP
FAQ
What was leaked in the Bukalapak breach?
The Bukalapak breach exposed: Email addresses, IP addresses, Names, Passwords, and Usernames.
When did the Bukalapak breach happen?
The Bukalapak breach was disclosed on October 23, 2017 and affected 13,369,666 records.
Am I affected by the Bukalapak breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the Bukalapak leak.