[DATA LEAK] igooana.id — 237 Records | Regional Users & Internal Data | 2025

Mansum · 14-09-25, 07:20 AM

thanks

hannahmartin · 15-09-25, 09:57 AM

THX for Sharing

imma83 · (This post was last modified: 15-09-25, 03:37 PM by imma83.)

(12-09-25, 10:32 AM)privilege Wrote: Target: igooana.id
Records: 237
Date: 2025
Status: Private / Unreleased

About igooana.id:
Platform operating in Indonesia with regional segmentation of users, mainly
South Sulawesi (Makassar, Bone, Bulukumba) and East Java (Kediri, Malang,
Blitar, Tulungagung). Appears to be tied to internal business/customer
registrations with regional management functions.

Dataset Overview:
- Contains user IDs, regional allocation (Area/Region/Type), NIK (unique
identifier), full names, emails, and account status (Active / Not Active).
- Coverage: mix of individual and organizational users across multiple
provinces.
- Includes corporate-style identifiers such as "MD", "TMD", "ADMIN",
"ARCO", "TL" within the Type column, showing roles or internal hierarchy.
- Data exposes both active accounts and deactivated ones, useful for
mapping structures or targeting live users.

Columns:
ID,Area,Region,Type,Nik,Name,Email,Status

This leak demonstrates weak access control on igooana.id, exposing
sensitive regional user data that should not be publicly available.

───────────────────────────────

───────────────────────────────

thanks

Genel · 02-10-25, 08:57 PM

Appreciate it thanks very much.

echo_party · 03-10-25, 01:07 AM

let me see

Sean25704 · 24-12-25, 08:42 AM

Thanks!

fjradi · 17-01-26, 03:38 PM

thx sir

rimm · 17-01-26, 05:03 PM

thanks sir

amild_sampoerna · 17-01-26, 10:42 PM

(12-09-25, 10:32 AM)privilege Wrote: Target: igooana.id
Records: 237
Date: 2025
Status: Private / Unreleased

About igooana.id:
Platform operating in Indonesia with regional segmentation of users, mainly
South Sulawesi (Makassar, Bone, Bulukumba) and East Java (Kediri, Malang,
Blitar, Tulungagung). Appears to be tied to internal business/customer
registrations with regional management functions.

Dataset Overview:
- Contains user IDs, regional allocation (Area/Region/Type), NIK (unique
identifier), full names, emails, and account status (Active / Not Active).
- Coverage: mix of individual and organizational users across multiple
provinces.
- Includes corporate-style identifiers such as "MD", "TMD", "ADMIN",
"ARCO", "TL" within the Type column, showing roles or internal hierarchy.
- Data exposes both active accounts and deactivated ones, useful for
mapping structures or targeting live users.

Columns:
ID,Area,Region,Type,Nik,Name,Email,Status

This leak demonstrates weak access control on igooana.id, exposing
sensitive regional user data that should not be publicly available.

───────────────────────────────

───────────────────────────────

Blackhat2026 · 18-01-26, 07:18 PM

(12-09-25, 10:32 AM)privilege Wrote: Target: igooana.id
Records: 237
Date: 2025
Status: Private / Unreleased

About igooana.id:
Platform operating in Indonesia with regional segmentation of users, mainly
South Sulawesi (Makassar, Bone, Bulukumba) and East Java (Kediri, Malang,
Blitar, Tulungagung). Appears to be tied to internal business/customer
registrations with regional management functions.

Dataset Overview:
- Contains user IDs, regional allocation (Area/Region/Type), NIK (unique
identifier), full names, emails, and account status (Active / Not Active).
- Coverage: mix of individual and organizational users across multiple
provinces.
- Includes corporate-style identifiers such as "MD", "TMD", "ADMIN",
"ARCO", "TL" within the Type column, showing roles or internal hierarchy.
- Data exposes both active accounts and deactivated ones, useful for
mapping structures or targeting live users.

Columns:
ID,Area,Region,Type,Nik,Name,Email,Status

This leak demonstrates weak access control on igooana.id, exposing
sensitive regional user data that should not be publicly available.

───────────────────────────────

───────────────────────────────