Your Data May Be Exposed. The Aiqqon Breach Hit 38,212 Records.

HEROIC analysts identified a dataset tied to Aiqqon, an Indonesian digital solutions company, following a breach dated September 2, 2025. The dataset contains 38,212 records, each pairing an email address with a phone number, first and last name, and a bcrypt password hash. The data was pulled from the company's user database and shared through illicit online channels.

Why This Data Is Still Worth Worrying About

Bcrypt is a stronger hashing method than many older algorithms, which means cracking these passwords takes more time and effort than a typical breach. But the name, phone number, and email address sitting alongside each hash are already usable without any cracking at all. If your information is part of this dataset, an attacker does not need your password to start targeting you with convincing phishing messages or fraudulent calls that reference your real details.

What Was Exposed in the Aiqqon Breach

• Email addresses
• Phone numbers
• First and last names
• Password hashes (bcrypt)

Why This Matters for Anyone in the Data

Even a strong hash does not stop attackers from combining the exposed personal details with other leaked data to build a fuller profile, which fuels identity theft and targeted phishing. If a password is eventually cracked or was reused elsewhere, it also opens the door to credential stuffing and full account takeover.

How This Database Breach Happened

This incident is classified as a database breach, meaning attackers gained direct access to Aiqqon's backend systems and extracted the stored user records in one sweep. That data was then shared through underground channels, giving anyone who obtains it a ready made list of names, contact details, and password hashes to work from.

Check If Your Information Was in the Aiqqon Leak

If you have used Aiqqon's services, it is worth checking whether your details are part of this leak. HEROIC's free breach scanner searches a database of more than 400 billion leaked records, including this one, so you can see exactly what was exposed and take steps to protect your accounts.