Privacy Unpacked

Reported breach

Tokopedia data breach

IDIndonesia

ANTARA News Kalimantan Tengah reported a data breach at Tokopedia (Indonesia) on 13 October 2026. Exposed: User account data.

If Tokopedia had your data

  1. Look for Tokopedia’s own notice or letter: it should say what of yours was involved. Keep it.
  2. Expect scams that use your details: calls, texts or emails pretending to be Tokopedia, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

One email to confirm first. We use your address only for this alert, and one click deletes it.

Earlier breaches at Tokopedia

From the official registers’ and Have I Been Pwned’s full histories. A name match: check the notice to be sure it is the same company.

  1. Have I Been Pwned · 71,443,698 accounts · began 17 April 2020

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Found a mistake? Tell us and we correct it.