ShellCodeX
Tools • Events • News • Insights
ShellCodeX Breach Report

Ajarn Data Breach

ajarn.com
Limited exposure
Verified breach Passwords exposed
Accounts exposed 266,399
Breach date 13 Dec 2018
Added to tracker 26 Sep 2021
Data classes 12

What happened

In September 2021, the Thai-based English language teaching website Ajarn discovered they'd been the victim of a data breach dating back to December 2018. The breach was self-submitted to HIBP and included 266k email addresses, names, genders, phone numbers and other personal information. Hashed passwords were also impacted in the breach.

Exposed data

Dates of birth Education levels Email addresses Genders Geographic locations Job applications Marital statuses Names Nationalities Passwords Phone numbers Profile photos

Recommended actions

  • Change your Ajarn password immediately, and update it anywhere you reused the same password.
  • Enable two-factor authentication on the affected account and on your critical services (email, banking).
  • Watch for targeted phishing emails referencing Ajarn — attackers weaponise breach data quickly.
  • Stay alert for smishing (SMS phishing) and SIM-swap attempts using your phone number.
  • Exposed identity data raises identity-theft risk — consider credit monitoring or a credit freeze.
Am I affected? Check whether your email address appears in this breach.
Check on HIBP