[LEAK] UNHAS.AC.ID — 99,930 Accounts | Students + Staff + Admins
by privilege - Friday September 12, 2025 at 10:52 AM
#11
i check this
Ban reason: leeching (Permanent)
Reply
#12
thanks
Reply
#13
(12-09-25, 10:52 AM)privilege Wrote: Target: UNHAS.AC.ID 
Records: 99,930 
Date: 2024 
Status: Private / Not Released 

About UNHAS.AC.ID: 
Universitas Hasanuddin (UNHAS) is one of Indonesia’s largest public universities, 
with tens of thousands of students, staff, and faculty. The compromised data 
includes sensitive academic, administrative, and personal information from 
students and employees across multiple faculties (Engineering, Medicine, 
Agriculture, Economics, Postgraduate programs, etc.). 

Dataset Details: 
- Total: ~99,930 rows 
- Data from student emails (@student.unhas.ac.id), staff (@unhas.ac.id), 
  and faculty subdomains (@fe.unhas.ac.id, @Med.unhas.ac.id, @agri.unhas.ac.id, etc.). 
- Passwords include a mix of MD5, bcrypt ($2y$10$), and legacy `$1$` salted hashes. 
- Columns in this dump: 
  id, username, email, password, first_name, last_name, built_in_password, 
  is_admin, remember_token, created_at, updated_at 
- Multiple **admin-level accounts** identified. 
- Includes active student credentials, faculty staff, and system admins. 
- Some records contain creation and update timestamps (dating back to 2020–2022). 

Security Impact: 
- Access to student portals, faculty email accounts, and admin dashboards. 
- Password hashes (MD5 and legacy crypt) are weak and may be cracked. 
- Large-scale exposure of university staff and student identity data. 
- Critical risk for phishing, account takeover, and impersonation. 

─────────────────────────────── 
 
───────────────────────────────
i like your content
Reply
#14
thankы
Reply
#15
Thanks
Reply
#16
i like your content
Ban reason: leeching (Permanent)
Reply
#17
(12-09-25, 10:52 AM)privilege Wrote: Target: UNHAS.AC.ID 
Records: 99,930 
Date: 2024 
Status: Private / Not Released 

About UNHAS.AC.ID: 
Universitas Hasanuddin (UNHAS) is one of Indonesia’s largest public universities, 
with tens of thousands of students, staff, and faculty. The compromised data 
includes sensitive academic, administrative, and personal information from 
students and employees across multiple faculties (Engineering, Medicine, 
Agriculture, Economics, Postgraduate programs, etc.). 

Dataset Details: 
- Total: ~99,930 rows 
- Data from student emails (@student.unhas.ac.id), staff (@unhas.ac.id), 
  and faculty subdomains (@fe.unhas.ac.id, @Med.unhas.ac.id, @agri.unhas.ac.id, etc.). 
- Passwords include a mix of MD5, bcrypt ($2y$10$), and legacy `$1$` salted hashes. 
- Columns in this dump: 
  id, username, email, password, first_name, last_name, built_in_password, 
  is_admin, remember_token, created_at, updated_at 
- Multiple **admin-level accounts** identified. 
- Includes active student credentials, faculty staff, and system admins. 
- Some records contain creation and update timestamps (dating back to 2020–2022). 

Security Impact: 
- Access to student portals, faculty email accounts, and admin dashboards. 
- Password hashes (MD5 and legacy crypt) are weak and may be cracked. 
- Large-scale exposure of university staff and student identity data. 
- Critical risk for phishing, account takeover, and impersonation. 

─────────────────────────────── 
 
───────────────────────────────
Ban reason: leeching (Permanent)
Reply
#18
(12-09-25, 10:52 AM)privilege Wrote: Target: UNHAS.AC.ID 
Records: 99,930 
Date: 2024 
Status: Private / Not Released 

About UNHAS.AC.ID: 
Universitas Hasanuddin (UNHAS) is one of Indonesia’s largest public universities, 
with tens of thousands of students, staff, and faculty. The compromised data 
includes sensitive academic, administrative, and personal information from 
students and employees across multiple faculties (Engineering, Medicine, 
Agriculture, Economics, Postgraduate programs, etc.). 

Dataset Details: 
- Total: ~99,930 rows 
- Data from student emails (@student.unhas.ac.id), staff (@unhas.ac.id), 
  and faculty subdomains (@fe.unhas.ac.id, @Med.unhas.ac.id, @agri.unhas.ac.id, etc.). 
- Passwords include a mix of MD5, bcrypt ($2y$10$), and legacy `$1$` salted hashes. 
- Columns in this dump: 
  id, username, email, password, first_name, last_name, built_in_password, 
  is_admin, remember_token, created_at, updated_at 
- Multiple **admin-level accounts** identified. 
- Includes active student credentials, faculty staff, and system admins. 
- Some records contain creation and update timestamps (dating back to 2020–2022). 

Security Impact: 
- Access to student portals, faculty email accounts, and admin dashboards. 
- Password hashes (MD5 and legacy crypt) are weak and may be cracked. 
- Large-scale exposure of university staff and student identity data. 
- Critical risk for phishing, account takeover, and impersonation. 

─────────────────────────────── 
 
───────────────────────────────

(y) thanks mate
Reply
#19
(12-09-25, 11:12 AM)millukizoldyck Wrote: thank youu
Ban reason: leeching (Permanent)
Reply
#20
(12-09-25, 10:52 AM)privilege Wrote: Target: UNHAS.AC.ID 
Records: 99,930 
Date: 2024 
Status: Private / Not Released 

About UNHAS.AC.ID: 
Universitas Hasanuddin (UNHAS) is one of Indonesia’s largest public universities, 
with tens of thousands of students, staff, and faculty. The compromised data 
includes sensitive academic, administrative, and personal information from 
students and employees across multiple faculties (Engineering, Medicine, 
Agriculture, Economics, Postgraduate programs, etc.). 

Dataset Details: 
- Total: ~99,930 rows 
- Data from student emails (@student.unhas.ac.id), staff (@unhas.ac.id), 
  and faculty subdomains (@fe.unhas.ac.id, @Med.unhas.ac.id, @agri.unhas.ac.id, etc.). 
- Passwords include a mix of MD5, bcrypt ($2y$10$), and legacy `$1$` salted hashes. 
- Columns in this dump: 
  id, username, email, password, first_name, last_name, built_in_password, 
  is_admin, remember_token, created_at, updated_at 
- Multiple **admin-level accounts** identified. 
- Includes active student credentials, faculty staff, and system admins. 
- Some records contain creation and update timestamps (dating back to 2020–2022). 

Security Impact: 
- Access to student portals, faculty email accounts, and admin dashboards. 
- Password hashes (MD5 and legacy crypt) are weak and may be cracked. 
- Large-scale exposure of university staff and student identity data. 
- Critical risk for phishing, account takeover, and impersonation. 

─────────────────────────────── 
 
───────────────────────────────
thanks sir so much
Reply


Forum Jump:


 Users browsing this thread: 1 Guest(s)