StarNet Data Breach (2015): What Was Exposed & What To Do
The StarNet Data Breach (2015) (reported February 26, 2015) exposed Customer interactions, Dates of birth, Email addresses and Genders belonging to roughly 139K people. If you have an account with them, your information may now be circulating on the open web and with data brokers. Here’s exactly what happened, how to check if you were affected, and what to do next.
In February 2015 a database belonging to the Moldavian internet service provider StarNet was published online. The incident affected approximately 139,000 individuals and exposed a range of customer records that included email addresses along with names, dates of birth, genders, passport numbers, IP addresses, MAC addresses and details of customer interactions.
The publication of such records creates immediate practical consequences for the people whose information appeared in the dump. Passport numbers and dates of birth, when combined with names and contact details, can be used to support identity verification processes or to build more complete profiles of individuals without their knowledge.
Inside the incident
The breach was reported on 26 February 2015. Public records state that StarNet’s database was made available online and contained nearly 140,000 email addresses together with associated personal details. The material included contact information, usage patterns recorded by the ISP and passport numbers. No further technical details about the method of access or the precise volume of records have been disclosed in available reporting.
How a breach like this happens
Incidents involving the online publication of ISP customer databases often begin with unauthorised access to internal systems that store subscriber information. Once obtained, the data may be copied and released on public file-sharing platforms. Such releases can occur without prior notice to the organisation or to affected individuals, and the original point of entry may remain undetermined if logs are incomplete or have been removed.
StarNet and its sector
StarNet operates as an internet service provider in Moldova. Organisations in this sector routinely maintain records that enable service delivery, billing and network management. These records commonly contain identifiers such as names, addresses, account credentials and device information. A breach at an ISP is consequential because the data it holds can link online activity to verified personal identities over extended periods.
What was likely exposed
The reported dump named the following categories of information: customer interactions, dates of birth, email addresses, genders, IP addresses, MAC addresses, names and passport numbers. The exact scope of every record and whether additional fields were present remain unconfirmed beyond the categories listed in contemporary reports.
Why it matters
Passport numbers and dates of birth are persistent identifiers that can support fraudulent account openings or verification bypasses. IP and MAC addresses can be correlated with timestamps to reconstruct patterns of internet use. When these elements appear together with names and email addresses, the resulting dataset increases the potential for targeted misuse, although the actual rate of subsequent exploitation varies and is not recorded in the original reporting.
If your data was in this breach
Individuals who suspect their information may have been included should change passwords on any accounts that reuse the exposed email address and enable multi-factor authentication where available. Monitoring official correspondence from financial institutions and government services for unexpected activity is a standard precaution. Readers can also run a free exposure scan of their email address against known breach datasets to determine whether their information appears in this or other documented incidents.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
SourceBreach data provided in part by Have I Been Pwned, used under CC BY 4.0.
More recent breaches
Trillian Data Breach (2015)QuinStreet Data Breach (2015)Aternos Data Breach (2015)The Fappening Data Breach (2015)Latest breaches
Read GalaxyWarden’s full analysis of the StarNet Data Breach (2015) →
Verified breach. Breach data provided in part by Have I Been Pwned, used under CC BY 4.0.
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.