Indah Water Konsortium
Data Breach on November 08, 2023
| Data Breach Report | ||
|---|---|---|
| Victim | iwk.com.my | |
| Threat Actor | Rhysida | |
| Date Discovered | Nov 08, 2023 | |
| Description | Indah Water Konsortium Sdn Bhd (‘IWK’) is a national sewerage company in Malaysia. | |
| Leak Size | Unknown |
Credential Exposure for iwk.com.my
We've indexed 347 @iwk.com.my accounts from external breaches, plus 4,001 credentials for iwk.com.my itself.
Last checked Aug 16, 2026
| @iwk.com.my addresses from external breaches | |
|---|---|
| Third-party breaches | 233 accounts · across 77 breaches · 212 with a plaintext password · most recent Jan 6, 2026 |
| Combo lists | 210 accounts · most recent Aug 15, 2026 |
| Passwords for iwk.com.my accounts | |
|---|---|
| Combo lists | 2,681 logins · most recent Aug 15, 2026 |
| Infostealer logs | 1,701 logins · 1,401 infected devices · most recent Aug 8, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
Indah Water Konsortium was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.