Posts: 10
Threads: 0
Joined: Oct 2025
(12-09-25, 10:52 AM)privilege Wrote: Target: UNHAS.AC.ID
Records: 99,930
Date: 2024
Status: Private / Not Released
About UNHAS.AC.ID:
Universitas Hasanuddin (UNHAS) is one of Indonesia’s largest public universities,
with tens of thousands of students, staff, and faculty. The compromised data
includes sensitive academic, administrative, and personal information from
students and employees across multiple faculties (Engineering, Medicine,
Agriculture, Economics, Postgraduate programs, etc.).
Dataset Details:
- Total: ~99,930 rows
- Data from student emails (@student.unhas.ac.id), staff (@unhas.ac.id),
and faculty subdomains (@fe.unhas.ac.id, @Med.unhas.ac.id, @agri.unhas.ac.id, etc.).
- Passwords include a mix of MD5, bcrypt ($2y$10$), and legacy `$1$` salted hashes.
- Columns in this dump:
id, username, email, password, first_name, last_name, built_in_password,
is_admin, remember_token, created_at, updated_at
- Multiple **admin-level accounts** identified.
- Includes active student credentials, faculty staff, and system admins.
- Some records contain creation and update timestamps (dating back to 2020–2022).
Security Impact:
- Access to student portals, faculty email accounts, and admin dashboards.
- Password hashes (MD5 and legacy crypt) are weak and may be cracked.
- Large-scale exposure of university staff and student identity data.
- Critical risk for phishing, account takeover, and impersonation.
───────────────────────────────
───────────────────────────────
Reply
Reply
Reply
Reply
Reply
Posts: 8
Threads: 0
Joined: May 2025
thanks sir
Reply
Reply
Reply
Reply
Reply
Posts: 10
Threads: 0
Joined: Aug 2025
thx for sharing thou!!!
Reply
Reply
Reply
Reply
Reply
Posts: 95
Threads: 0
Joined: Aug 2025
thanks
Reply
Reply
Reply
Reply
Reply
Posts: 99
Threads: 0
Joined: Aug 2025
thanks
Reply
Reply
Reply
Reply
Reply
Posts: 4
Threads: 0
Joined: Aug 2025
good post
Reply
Reply
Reply
Reply
Reply
Posts: 16
Threads: 0
Joined: Oct 2025
(12-09-25, 10:52 AM)privilege Wrote: Target: UNHAS.AC.ID
Records: 99,930
Date: 2024
Status: Private / Not Released
About UNHAS.AC.ID:
Universitas Hasanuddin (UNHAS) is one of Indonesia’s largest public universities,
with tens of thousands of students, staff, and faculty. The compromised data
includes sensitive academic, administrative, and personal information from
students and employees across multiple faculties (Engineering, Medicine,
Agriculture, Economics, Postgraduate programs, etc.).
Dataset Details:
- Total: ~99,930 rows
- Data from student emails (@student.unhas.ac.id), staff (@unhas.ac.id),
and faculty subdomains (@fe.unhas.ac.id, @Med.unhas.ac.id, @agri.unhas.ac.id, etc.).
- Passwords include a mix of MD5, bcrypt ($2y$10$), and legacy `$1$` salted hashes.
- Columns in this dump:
id, username, email, password, first_name, last_name, built_in_password,
is_admin, remember_token, created_at, updated_at
- Multiple **admin-level accounts** identified.
- Includes active student credentials, faculty staff, and system admins.
- Some records contain creation and update timestamps (dating back to 2020–2022).
Security Impact:
- Access to student portals, faculty email accounts, and admin dashboards.
- Password hashes (MD5 and legacy crypt) are weak and may be cracked.
- Large-scale exposure of university staff and student identity data.
- Critical risk for phishing, account takeover, and impersonation.
───────────────────────────────
───────────────────────────────
Reply
Reply
Reply
Reply
Reply
Posts: 72
Threads: 0
Joined: Aug 2025
(12-09-25, 10:52 AM)privilege Wrote: Target: UNHAS.AC.ID
Records: 99,930
Date: 2024
Status: Private / Not Released
About UNHAS.AC.ID:
Universitas Hasanuddin (UNHAS) is one of Indonesia’s largest public universities,
with tens of thousands of students, staff, and faculty. The compromised data
includes sensitive academic, administrative, and personal information from
students and employees across multiple faculties (Engineering, Medicine,
Agriculture, Economics, Postgraduate programs, etc.).
Dataset Details:
- Total: ~99,930 rows
- Data from student emails (@student.unhas.ac.id), staff (@unhas.ac.id),
and faculty subdomains (@fe.unhas.ac.id, @Med.unhas.ac.id, @agri.unhas.ac.id, etc.).
- Passwords include a mix of MD5, bcrypt ($2y$10$), and legacy `$1$` salted hashes.
- Columns in this dump:
id, username, email, password, first_name, last_name, built_in_password,
is_admin, remember_token, created_at, updated_at
- Multiple **admin-level accounts** identified.
- Includes active student credentials, faculty staff, and system admins.
- Some records contain creation and update timestamps (dating back to 2020–2022).
Security Impact:
- Access to student portals, faculty email accounts, and admin dashboards.
- Password hashes (MD5 and legacy crypt) are weak and may be cracked.
- Large-scale exposure of university staff and student identity data.
- Critical risk for phishing, account takeover, and impersonation.
───────────────────────────────
───────────────────────────────
why is there so many leak from indonesia lol
Yep. The one from BreachForums. ah, the good old days....
Reply
Reply
Reply
Reply
Reply
|