Indigo
Data Breach on March 01, 2023
| Data Breach Report | ||
|---|---|---|
| Victim | indigo.ca | |
| Threat Actor | LockBit | |
| Date Discovered | Mar 01, 2023 | |
| Description | Indigo is Canada’s only major English-language bookstore chain. | |
| Leak Size | Unknown |
Credential Exposure for indigo.ca
We've indexed 1,083 @indigo.ca accounts from external breaches, plus 2,037 credentials for indigo.ca itself.
Last checked Aug 16, 2026
| @indigo.ca addresses from external breaches | |
|---|---|
| Third-party breaches | 895 accounts · across 131 breaches · 791 with a plaintext password · most recent Jan 8, 2026 |
| Combo lists | 561 accounts · most recent Aug 15, 2026 |
| Phishing pages | 25 accounts · most recent Aug 12, 2026 |
| Passwords for indigo.ca accounts | |
|---|---|
| Combo lists | 1,170 logins · most recent Aug 15, 2026 |
| Infostealer logs | 921 logins · 648 infected devices · most recent Aug 8, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
Indigo was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.