What was exposed, when it happened, and which databases confirm it.
- accounts
- 942,450
- Breached
- November 23, 2021
- Last Update
- April 8, 2022
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In November 2021, the Indonesian real estate website Travelio suffered a data breach that exposed over 470k customer accounts. The data included email addresses, names, password hashes, phone numbers and for some accounts, dates of birth, physical address and Facebook auth tokens. The data was provided to HIBP by a source who requested it be attributed to "[email protected]".
Compromised Info
- Auth tokens
- Dates of birth
- Email addresses
- Names
- Passwords
- Phone numbers
- Physical addresses
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- LeakCheck— linked via automatic string matching
- HIBP
FAQ
What was leaked in the Travelio breach?
The Travelio breach exposed: Auth tokens, Dates of birth, Email addresses, Names, Passwords, Phone numbers, and Physical addresses.
When did the Travelio breach happen?
The Travelio breach was disclosed on November 23, 2021 and affected 942,450 records.
Am I affected by the Travelio breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the Travelio leak.