Back to Feed
BreachesMay 18, 2026

Indonesian LSP Certification Databases Allegedly Leaked: 20+ Professional Certification Institute Datasets Exposed

Threat actor claims to have leaked 20+ Indonesian professional certification institute databases in extortion campaign.

Summary

A threat actor identified as 'Kyyza' is allegedly publishing databases from Indonesian Professional Certification Institutes (LSP), claiming to have compromised over 20 datasets containing certification participant records, personal identifiers, and financial information. The leaks are part of an ongoing extortion-driven campaign with the actor posting SQL samples and database previews as proof. Exposed data includes names, birthdates, national ID numbers, email addresses, phone numbers, and banking/transaction records, creating significant risk for identity theft, phishing, and financial fraud.

Full text

Breach Report · Indonesia Indonesian LSP Certification Databases Allegedly Leaked: 20+ Professional Certification Institute Datasets Exposed A threat actor claims to be publishing additional databases tied to Indonesian Professional Certification Institutes (LSP), alleging that more than 20 LSP datasets have been obtained and are being released as part of an ongoing extortion-driven leak campaign. Post details Actor[Citizen] Kyyza SectorProfessional Certification / Education / Workforce Credentials TypeDatabase Leak / Extortion Leak Records20+ LSP databases CountryIndonesia Date18/05/2026 Compromised data Certification participant and assessee records Registration numbers and certification-related identifiers Names, birthplaces, birth dates, ages, and email fields Phone number and national identity number fields Profession, education level, and citizenship-related fields Payment, bank account, and transaction-related records SQL database files tied to multiple LSP entities Sample database tables and structured records shared as proof Potential impact The exposed data could be used for identity theft, phishing, credential fraud, financial scams, and targeted social engineering against certification participants, staff, and Indonesian LSP organizations. Status Unverified underground forum claim. The actor posted database file previews and SQL samples, stating that additional LSP datasets will continue to be published. Screenshots Screenshot 1 Screenshot 2 Screenshot 3 Screenshot 4 Want the non-blurred screenshots? Subscribe and check out the threat feed or ransomware feed section. darkwebinformer.com/pricing

Entities

Kyyza (threat_actor)Indonesian LSP Certification Database Leak Campaign (campaign)SQL databases (technology)