Digimon Data Breach

What happened

In September 2016, over 16GB of logs from a service indicated to be digimon.co.in were obtained, most likely from an unprotected Mongo DB instance. The service ceased running shortly afterwards and no information remains about the precise nature of it. Based on enquiries made via Twitter, it appears to have been a mail service possibly based on PowerMTA and used for delivering spam. The logs contained information including 7.7M unique email recipients (names and addresses), mail server IP addresses, email subjects and tracking information including mail opens and clicks.

Exposed data

Recommended actions

• Watch for targeted phishing emails referencing Digimon — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.