Lumin PDF
NJCCIC Data Breach Notification
Original Release Date: 9/23/2019
Summary
On September 16, an individual shared Lumin PDF user information on a hacking forum. The individual claims they notified Lumin PDF administrators of a publicly available MongoDB database that contained data on nearly 24.4 million Lumin PDF users, but received no response back. The data contains full names, email addresses, gender, locale settings, and hashed password strings or Google access tokens, though Lumin PDF denies the claim that Google access tokens were valid. According to Lumin PDF, they resolved the security vulnerabilities that led to the breach.
The NJCCIC is a component organization within the New Jersey Office of Homeland Security and Preparedness. We are the State's one-stop-shop for cyber threat analysis, incident reporting, and information sharing and are committed to making New Jersey more resilient to cyber threats by spreading awareness and promoting the adoption of best practices.
View our Privacy Policy here.
View our Site Index here.