Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
Breach occurred 2019-04-01Verifiedluminpdf.com
What happened
In April 2019, the PDF management service Lumin PDF suffered a data breach. The breach wasn't publicly disclosed until September when 15.5M records of user data appeared for download on a popular hacking forum. The data had been left publicly exposed in a MongoDB instance after which Lumin PDF was allegedly been "contacted multiple times, but ignored all the queries". The exposed data included names, email addresses, genders, spoken language and either a bcrypt password hash or Google auth token.
Data exposed
Frequently asked questions
The Lumin PDF data breach occurred on April 1, 2019. It was added to Have I Been Pwned's breach catalog on September 18, 2019.
15,453,048 accounts were affected by the Lumin PDF data breach, according to Have I Been Pwned's records.
The Lumin PDF breach exposed the following data types: Auth tokens, Email addresses, Genders, Names, Passwords, Spoken languages, Usernames.
Yes. Have I Been Pwned has verified the Lumin PDF breach, meaning there's confirmed evidence the exposed data is genuine and tied to real accounts.
Use KazaSec's free Email Breach Checker (/tools/breach-check) to check whether a specific email address has surfaced in the Lumin PDF breach, or any other known breach — the tool never stores what you search.
Our free Email Breach Checker tells you whether a specific email address has surfaced in this breach — or any other known breach — without ever storing what you search.
Check your email →Talk to us about this
We help organizations find and fix the gaps that lead to a breach, before they do.