Fore Data Breach: What Was Exposed and What to Do

In short: PT Fore Kopi Indonesia Tbk, the company behind Fore Coffee, says unauthorized access to a customer-data platform affected up to approximately 5.7 million customer accounts, exposing details like names, emails, phone numbers and hashed PINs. Payment card data and national ID numbers were not affected, according to Fore's own breach notice, and the company says it has so far found no sign the data has been misused.

If you have a Fore account, here's what the company has confirmed, what it hasn't, and what to do while the investigation continues.

What exactly was exposed in the Fore data breach?

Fore says the data exposed varies by customer but can include name, email address, phone number, date of birth, gender, the address registered on the Fore app, a hashed PIN, and purchase history on the app. The company's notice states: "The types of data affected vary for each customer and may include name, email address, phone number, date of birth, gender, the address registered on the Fore app, hashed PIN and purchase history on the Fore app," according to Fore's statement. A hashed PIN isn't your actual PIN sitting in plain text — it's been run through a one-way scrambling process — but hashed data can sometimes still be cracked, which is why Fore is telling customers to change it.

How many Fore accounts were affected, and when did this happen?

Fore's preliminary findings point to about 5.7 million customer accounts. The company's notice says: "Preliminary findings indicate that the incident affected the data of up to approximately 5.7 million customer accounts," per Fore's disclosure. Fore says it stopped the unauthorized access and secured the affected system within 24 hours of identifying the activity, and reported the incident to Indonesia's Ministry of Communication and Digital Affairs (Komdigi). CNN Indonesia reported that Fore has appointed an outside cybersecurity consultant and that the forensic investigation is still ongoing.

Were payment card details or national ID numbers exposed?

No, according to Fore. The company says it never requested or stored national ID numbers (NIK) or ID card (KTP) photos through the Fore app, and that payment information — including credit or debit card details — is held on a separate platform that wasn't affected. Fore's notice states plainly: "As a result, this data was not affected," per the company's notice. On Fore's account, then, the main exposure is the hashed PIN and contact details — not a bank card or ID number, so there is nothing to freeze or re-issue.

What should I do if my Fore account was compromised?

Fore is telling affected customers to change their account PIN right away, and the same advice applies to anyone who reused that PIN elsewhere. A fuller checklist:

1. Change your Fore PIN immediately, or create one if you don't have one yet — this is Fore's own instruction to affected customers, per its notice.
2. Change the PIN or password on any other account where you used the same PIN, since reused credentials are the easiest thing for attackers to exploit.
3. Turn on two-factor authentication if you haven't — Fore says it has added 2FA for logins from new devices as an extra layer of protection.
4. Never share your PIN or OTP code with anyone, including callers or messages claiming to be Fore. The company is explicit about this: "Customers are also urged to stay alert to phone calls, SMS, emails and WhatsApp messages claiming to be from FORE, and not to share their PIN or OTP code with anyone," according to Fore's statement.
5. Verify any Fore communication through official channels only. Fore has a separate warning telling customers to check promotions and announcements through its official contacts rather than trusting unsolicited messages, per the company's notice.
6. Watch for phishing attempts built around the leaked details — see how to spot phishing after a data breach for what these messages tend to look like.
7. If you reused your Fore PIN as a password somewhere else, read what to do if your PIN or password was leaked.
8. For a general breach response, follow this step-by-step checklist after a breach.

If you live somewhere that offers a credit-file block — Denmark, for instance, lets residents register a credit warning (kreditadvarsel) to stop loans being taken out in their name — it is worth checking whether your country has an equivalent, though nothing in this breach points to that risk yet.

Fore says customers needing more help can reach the company at [email protected] or through its official WhatsApp customer service line.

Who was responsible for the Fore data breach, and what's still unknown?

Fore has not named who carried out the access, and no source reviewed identifies an attacker or motive; the forensic investigation is ongoing. The company also hasn't said whether the stolen data has shown up for sale or been published anywhere. Its notice only states that, as of now, "there is no indication that the accessed information has been misused," per Fore's statement — a point CNN Indonesia also reported. That's a snapshot, not a guarantee: forensic investigations often turn up new findings later, and Fore says that work continues.