[Kin0x]

Hello BreachForums Community,

Dropping the full dump of LuminPDF — a New Zealand-based document workflow platform, breached back in April 2019.

---

---

This breach was never officially disclosed by the company. Instead, over 15 million user records were found publicly exposed via a misconfigured MongoDB instance, allegedly ignored by the vendor despite multiple contact attempts.
The dataset was eventually dumped on a well-known hacking forum in late 2019. 
It contains rich user profiles ideal for credential analysis, phishing or takeover campaigns — including:

---

• Full names, usernames 
• Email addresses 
• Genders 
• Spoken languages 
• Either bcrypt password hashes or Google auth tokens 
• Attribution: [email protected]

---

All users were active LuminPDF members between ~2016–2019. 
This is the **original full breach** — not a sample, not partial.

---

Target: luminpdf.com 
Format: MongoDB Dump → JSON/CSV 
Records: 15,453,048 
Data: Name, Email, Gender, Language, Bcrypt Hash or Google Token 
Breached by: @Solonik

---

"Sharmori Lewis","Sharmori Lewis",null,"[email protected]","female","en",null,"ya29.sAI1QE93Tg1WRgE8qR6dUJKEdlwbESYLIYi3ZDeGcDNFJXr6OqBu8cdR_BCLaLAqsI2GUu8cJMmE"
"Tyler Heaps","Tyler Heaps",null,"[email protected]","male","en",null,"ya29.PgLnjCMDRfWrviFTzkmW2KPkxz23b88FMBZLS6PPff2lhF8PNLq_ECctsgcPqf7skCQB"
"José María Serra",null,"[email protected]",null,null,null,"$2a$10$t5d1.4chxQ8AsfIlcbc4yeTwv6J6bJD32877JT95sdKBNUzy73VpG",null
"Lisa Laurent",null,"[email protected]",null,null,null,"$2a$10$30TbosAqROgud/8uQfUOuuj2r/gQ.86/lgymFOQ9jgzMwuCzpVLUW",null
"Phoebe Guyton","Phoebe Guyton",null,"[email protected]",null,"en",null,"ya29.IgIIhvPEevOWQw8MrzRQAe0UH4zKEnaKRjQtpEchq0UJD2wJfkLe_6AwEWuMSOxyosIp5Q"
"Gregory Landsberg","Gregory Landsberg",null,"[email protected]","male","en",null,"ya29.2QGH90gM7AAXFrjxdqSgvI4Pv0dTJ42G8RZdg4ndtKpC0_YEo4v19Zzn2Mk8v9a0QUQ4"
"Thomas Shipo","Thomas Shipo",null,"[email protected]","male","en",null,"ya29.xwGfxb9y9I6clg6HlbdHlscUuopevwF6XSA9m18gSjjWAqjY7j6cxNpygyGxq5frPklj"
"Tereza Stárková","Tereza Puldová",null,"[email protected]","female","en",null,"ya29.GluxBUjTKcg7FHAg8sihPqCrpF9na2fHHCwFDDAcMMuZZ7I4i4ewM9FtXymkYO5S5rT_WOUpzdMDGZ4fSmfJhpqu3-asgQs3M1LhpJ0SfhZtUadk2f0cZITj3xGF"
"Michael Kuhl","Michael Kuhl",null,null,"male","en",null,"ya29.igKoqVCNmHjM2FKWQ372Z0AVM0a4HsV0s-zHeGJ5TnvSQUilCdJj20v7VH6yv-Tji4Th"
"Pina Licciardino","Pina Licciardino",null,"[email protected]","fem

ale","en",null,"ya29.AALUvFSORCjLTAfQ8868u26GlK61wJmcmWoFaKbNViyC6Zg7WwEZyDAfmIXSX6XWj6RG"
"Lucia Musilli","Lucia Musilli",null,"[email protected]","female","en",null,"ya29.tAKUO7e9h-67TedrqXecWwwzBedtHJfy_mAyzK1LRlVk0RDhFG5Wws3ZmD77Gw0Zvg"
"eldin nur rajbi","eldin nur rajbi",null,"[email protected]",null,"ms",null,"ya29.6QH69dIMAb6_QJiSLiyqCYjcBHS1OZhWFcic-Wbdd2ANbgsow1gQ7UpmCDlreifxAHax"
"Arup Jana","Arup Jana",null,"[email protected]",null,"en",null,"ya29.PQIr6oa0c2Tfi21AB4NKetZ2ELxfXKxNowvVm9fphy1qAFX9_II10IqI9PvaGXrCqzvl"
"Heaven Home Health","Heaven Home Health",null,"[email protected]","other","en",null,"ya29.rQHUUuv703hvz16daRVtZxLQwiXM8x-FRZqoQwYz9jsrmJWcYfzwTkjuHB6eIv0hHMrn"
"CDA IPB gmail2","CDA IPB gmail2",null,"[email protected]",null,"in",null,"ya29.PAKPOnMbbp0MBTuLAv1_lnKORqerMbKnJqtPzrv6rm_oFhpbkbTBEhNiQvfY2ia4Jvlq"
"Saema Ansari","Saema Ansari",null,"[email protected]","female","en",null,"ya29.PwIGHW6JajvgEWjTU1lkeLpO5NqUfvhpCWZai3DPGW8J7RpDjhuNZ-SCqxiPoavXLC13"
"Gianluca Salerno","Gianluca Salerno",null,"[email protected]","male","it",null,"ya29.6AERAAQZYprafeHmucpMhhWz9Oycp3yCsz-VnOSvkbnNFd1MHM2wPvF7MWcllq1KtECI"
"Madison Vasile","Madison Vasile",null,"[email protected]",null,"en",null,"ya29.ZgKpjYpnODJZQn1G6GgpfTa8RmneHGQpYmIPf3pQVF3AKPSWx1bANX4WhQbBgMsDwrK56Js"
"Suzanne Hayes","Suzanne Hayes",null,"[email protected]","female","en",null,"ya29.GltGBLx-22Wi74hWCK2FnvKwe3A5D12h5wz0mDbPgzt5bKd8MI8p_AmOnkgqhn8JLiq4uDCGZ5a24nn03A2T38cwbqK6dNfxllwSdwnL0y1ypSAHZQPuSjPrhx2P"
"lalu prasad","lalu prasad",null,"[email protected]","male","en",null,"ya29.GluhBlErVsU9IjAZAoZAIVFW5cLResBZ1GEWYEWWdITY2yTYwpsmmdJFLc8b5ZarjeKxQ8HYDEIUY-P5zPDPDyM_-ZvvyDtejnmLuCv-Mm8yx6oj54pVXAAVcVSp"
"sinan jamil bhatti","sinan jamil bhatti",null,"[email protected]","male","en-GB",null,"ya29.dALjFfKIu_osRtP4xmhIIW4gEnA4Uz6txBy4nY20zqjvFYPLAh4wB9Pg2XX7_XwbDmm0"
"Laura Iisakka","Laura Iisakka",null,"[email protected]","female","fi",null,"ya29.YAJCiKqFfd5PDFmV4LxsQi8T2n7cCUwxK6v0L05jHfUdiuIy--zT1W9FBpd3AXJqE_eY"
"tsao tim","tsao tim",null,"[email protected]","male","zh-TW",null,"ya29.DAK26VXma1v45o3ZY63tqoTFx6UCGos7qe1GmUTuHhEJzebj_ZEz0IR30Ik1haI9Jz4G6w"
"Sachchida Nand Dwivedi","Sachchida Nand Dwivedi",null,"[email protected]","male","en",null,"ya29.EgKfqsG7s8Il9_NVgKCaJ9Q2TWI0sm4LnA8T4VzzGFCR6pcREtK3RW5mvcPGTpkTjRrp"
"Rafael Espinoza","Rafael Espinoza",null,"[email protected]","male","es",null,"ya29.mgEkym3ymlvyl6N5zGfhRBG5mMtl4tJsvlF2uv9I9Zs8kVyzzz1vSzRX-W8uYDJzyHwpoW84sTsw_Q"
"Matthew Mchugh",null,null,null,null,null,null,null

---

Breached: 1 April 2019 
Re-leaked: 9 January 2026  

---

DL

Hidden Content

You must register or login to view this content.

---

~ Solonik 
"We never needed a V1. We mirrored the chaos."

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Retarded Scammer | Reposting old leaks trying to make them look new | SQLmap skid | Multi-accounting @chucky_lucky | Banned on DF

[ThinkingOne]

This is the **original full breach** — not a sample, not partial. ...

Records: 15,453,048 

...Re-leaked: 9 January 2026  

I'm a bit confused.

The one I have from 2019 has the exact same fields, and 24M records.

For example, the first line of the file I have is:

"Sharmori Lewis","Sharmori Lewis",null,"[email protected]","female","en",null,"ya29.sAI1QE93Tg1WRgE8qR6dUJKEdlwbESYLIYi3ZDeGcDNFJXr6OqBu8cdR_BCLaLAqsI2GUu8cJMmE"

and yours is:

"Sharmori Lewis","Sharmori Lewis",null,"[email protected]","female","en",null,"ya29.sAI1QE93Tg1WRgE8qR6dUJKEdlwbESYLIYi3ZDeGcDNFJXr6OqBu8cdR_BCLaLAqsI2GUu8cJMmE"

I must be missing something here? Do I have something I wasn't supposed to have (it happens!)? Or is there something different/more than the original 2019 leak?

[Harsha093]

Sports fans celebrated competitive fixtures as leagues resumed, with standout performances, emerging talents, and close finishes drawing strong viewership, boosting ticket sales and online engagement across multiple platforms this week.

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.

[ThinkingOne]

Sports fans celebrated competitive fixtures as leagues resumed, with standout performances, emerging talents, and close finishes drawing strong viewership, boosting ticket sales and online engagement across multiple platforms this week.

This is what happens when you give someone 1 credit for every post.

[Tanaka]

Hello. We have deemed that this database is already on the forums.

Please check the official databases list ( https://bf.st/Announcement-Database-Index ) and search the forums ( https://bf.st/search.php ) before making a post.

Reposting can lead to a ban if it happens constantly. Please be responsible and check before posting.

If you feel that this is incorrect please contact an Admin.