IndiHome Data Breach (2019): What Was Exposed & What To Do

What happened

The breach involved customer-related records attributed to IndiHome. The dataset included device information, email addresses, genders, geographic locations, IP addresses and names. No official statement from the company detailing the method or precise timing of the intrusion has been referenced in public reports, and the scale beyond the 12.6 million unique email addresses remains unconfirmed.

How a breach like this happens

Incidents affecting telecommunications providers often begin with unauthorised access to customer-management or billing systems. Attackers may exploit unpatched software, weak authentication controls or stolen credentials to reach databases that store subscriber details. Once inside, data can be extracted in bulk and later shared or sold on forums. The interval between the original intrusion and public disclosure can extend for months or years when the activity is not immediately detected.

IndiHome and its sector

IndiHome operates as a major internet and television service provider in Indonesia. Companies in this sector routinely maintain large repositories of subscriber information to deliver connectivity, manage accounts and comply with regulatory requirements. A breach at such an organisation is consequential because the data can be used to map individual online activity and personal circumstances across a wide population.

The information in question

The records reported as exposed contain device information, email addresses, genders, geographic locations, IP addresses and names. It is not confirmed whether additional categories of data were present in the dataset. Telecommunications providers typically hold further details such as billing addresses, service usage logs and payment information, but the exact contents of this incident remain limited to the fields listed in public reports.

The real-world impact

Individuals whose information appears in the dataset may face increased attempts at phishing or account takeover using the combination of names, locations and email addresses. IP addresses and device details can assist in further targeting or correlation with other datasets. For the organisation, the incident adds to the operational burden of investigating the source of the leak and responding to regulatory or customer inquiries.

What to do if you're exposed

People who suspect their information may have been included should review recent account activity on any services tied to the exposed email address and enable multi-factor authentication where available. Monitoring credit reports or official identity-protection services can provide early notice of misuse. A free exposure scan of the email address against known breach datasets offers one practical way to check for further appearances of the same information.

• Change passwords on IndiHome and linked accounts.
• Enable multi-factor authentication on email and financial services.
• Watch for unsolicited messages that reference the exposed details.
• Run a free email exposure scan on a reputable breach-checking service.

AICompiled with AI assistance from public sources and published under our editorial standards.