74,328 Emails Leaked. The Source: Malaysia’s AsiaRecruit Database.

HEROIC threat intelligence identified a database exposure tied to AsiaRecruit, a Malaysian recruitment platform, on January 1, 2025. The leak contained 74,328 email addresses pulled from the platform's primary user table. Although no passwords or payment data were exfiltrated, the email-only dataset is already being weaponized for spear phishing against Malaysian professionals.

Why This AsiaRecruit Database Breach Is Dangerous

Recruitment-platform emails carry an unusually high fraud conversion rate. Every address belongs to a user actively engaged in career activity, meaning unsolicited recruiter messages, interview invitations, and offer letters feel perfectly in context. When attackers pair the AsiaRecruit list with publicly available LinkedIn data, they can craft highly personalized lures that reference real job titles, employer names, and industries, all without needing any of the breached data to include passwords.

What Was Exposed in AsiaRecruit

• 74,328 email addresses from Malaysian job seekers
• Records extracted directly from the recruitment platform database
• Data already circulating on dark web forums and Telegram
• No passwords or financial data exposed in this incident

Why This Matters

Email-only leaks remain dangerous because they anchor credential stuffing, account takeover, identity theft, and fraud campaigns. Attackers pair the AsiaRecruit list with credentials from other breaches to identify reused passwords, then pivot into Gmail, Microsoft, or corporate SSO. Job seekers who interact with fake recruiter messages risk handing over government IDs, banking details for fake payroll enrollment, or access to personal accounts under the guise of pre-employment checks.

How Database Breaches Work

Recruitment platforms typically operate with significant web surface area and a steady stream of user uploads, making them vulnerable to SQL injection, server-side request forgery, and stolen admin credentials. Once inside, attackers exfiltrate the entire user table with a single query. That raw list is then published on leak forums, rolled into bulk compilations, and bundled with other regional datasets to enrich attacker target databases.

Check If You Are Affected

HEROIC maintains a comprehensive view of more than 400 billion compromised records across dark web forums, underground marketplaces, and publicly leaked databases. Run a free scan to find out whether your email appeared in the AsiaRecruit breach and to identify every other leak that puts your digital identity at risk.