Indigo

Indigo

Data Breach on March 01, 2023
Data Breach Report
Victimindigo.ca
Claimed ByLockBit
Date DiscoveredMar 01, 2023
DescriptionIndigo is Canada’s only major English-language bookstore chain.
Leak SizeUnknown

Credential Exposure for indigo.ca

We've indexed 1,091 @indigo.ca accounts from external breaches, plus 2,304 credentials for indigo.ca itself.

Last checked Sep 27, 2026

@indigo.ca addresses from external breaches
Third-party breaches895 accounts · across 131 breaches · 791 with a plaintext password · most recent Jan 8, 2026
Combo lists576 accounts · most recent Sep 25, 2026
Phishing pages26 accounts · most recent Aug 12, 2026
Passwords for indigo.ca accounts
Combo lists1,341 logins · most recent Sep 25, 2026
Infostealer logs1,064 logins · 709 infected devices · most recent Sep 27, 2026

Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.

Is your organization next?

Indigo was breached. Check if your company's credentials have been exposed in this or other data breaches.

Check your exposure →

Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.