SOA People
Data Breach on December 16, 2025
| Data Breach Report | |||
|---|---|---|---|
| Victim | soapeople.com | ||
| Threat Actor | PayoutsKING | ||
| Date Discovered | Dec 16, 2025 | ||
| Description | SOA People is an IT consultancy and SAP partner based in Turkey, specializing in digital transformation via SAP technologies (ERP, S-4HANA, Cloud, etc.) for businesses | ||
| Leak Size | 1.5TB |
Credential Exposure for soapeople.com
We've indexed 131 @soapeople.com accounts from external breaches, plus 9 credentials for soapeople.com itself.
Last checked Aug 16, 2026
| @soapeople.com addresses from external breaches | |
|---|---|
| Third-party breaches | 126 accounts · across 31 breaches · 99 with a plaintext password · most recent Aug 18, 2024 |
| Combo lists | 36 accounts · most recent Aug 7, 2026 |
| Passwords for soapeople.com accounts | |
|---|---|
| Combo lists | 9 logins · most recent Jul 31, 2026 |
| Infostealer logs | 3 logins · 2 infected devices · most recent Jul 12, 2024 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
SOA People was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.