Ajarn Data Breach

What happened?

In September 2021, the Thai-based English language teaching website Ajarn discovered they'd been the victim of a data breach dating back to December 2018 . The breach was self-submitted to HIBP and included 266k email addresses, names, genders, phone numbers and other personal information. Hashed passwords were also impacted in the breach.

When did it happen?

The breach date in the public record is December 13, 2018. The record was added to the catalogue on September 26, 2021 and last updated there on September 26, 2021.

What information was reported as exposed?

• Dates of birth
• Education levels
• Email addresses
• Genders
• Geographic locations
• Job applications
• Marital statuses
• Names
• Nationalities
• Passwords
• Phone numbers
• Profile photos

These are incident-level categories. The record does not prove that every category was exposed for every affected person.

Who may be affected?

This record may be relevant to people who had an account or other relationship with Ajarn or used ajarn.com around December 13, 2018. A catalogue entry does not establish that every customer was affected or that every listed data category applied to each person. Compare the record with an official notice addressed to you.

What should you do?

Choose actions that match the information involved. If you find signs that someone is using your identity, the Federal Trade Commission provides a personal recovery plan at IdentityTheft.gov.