Omni.GG Users Beware: The Luxe.Omni Breach Exposed 20,000 Accounts
In September 2024, a database breach hit Luxe.Omni, the login portal for the Luxe application on the Omni.GG platform, a U.S.-based IT consulting and software development firm. The personal data of over 20,229 users was exposed and began circulating on dark web forums, putting real people at risk of phishing, identity fraud, and targeted social engineering attacks.
Why This Is Dangerous
This breach is particularly concerning because it exposed detailed personal contact information rather than just login credentials. When attackers combine names, email addresses, and phone numbers, they can craft highly convincing phishing emails and SMS scams that appear to come from trusted sources. Victims may not realize their data was leaked until they are already targeted.
What Was Exposed
- Email addresses
- Phone numbers
- First names and last names
Why This Matters
Even without passwords in the dataset, this breach carries serious risks:
- Phishing attacks: Criminals use your name, email, and phone to craft convincing scam messages impersonating banks, employers, or services you use.
- Account takeover: Attackers can use exposed contact details to bypass account recovery systems or social-engineer customer support agents into resetting your credentials.
- Identity theft: Full names combined with email and phone create a foundation for opening fraudulent accounts or loans in your name.
- SIM swapping: Phone numbers in the wrong hands can be used to port your mobile number, bypassing SMS-based two-factor authentication.
How Database Breaches Work
A database breach occurs when an attacker gains unauthorized access to the backend storage system of a website or application. Common methods include SQL injection attacks -- where malicious code is inserted into web forms or URLs to manipulate database queries -- and exploitation of unpatched software vulnerabilities. Once inside, attackers can copy or export entire tables of user data in seconds. The stolen data is then packaged and sold or distributed on dark web marketplaces, often within days of the breach occurring.
Check If You Are Affected
If you ever used the Luxe application on the Omni.GG platform, your personal data may be circulating among cybercriminals right now. Use Heroic's free breach search tool, backed by a database of over 400 billion compromised records, to instantly check whether your email address appears in this breach or thousands of others.
Breach Breakdown
20,229 passwords exposed. Is yours one of them?
Enter your email to scan this breach plus 400B+ other leaked records. If you're compromised, we'll show you exactly where and what to change.
Free forever · No account required · Results in seconds
/img/qr-code.png)