XOX
Data Breach on November 24, 2025
| Data Breach Report | |||
|---|---|---|---|
| Victim | xox.com.my | ||
| Threat Actor | Qilin | ||
| Date Discovered | Nov 24, 2025 | ||
| Description | XOX is a telecommunications and technology company based in Malaysia, operating as a mobile virtual network operator (MVNO) and providing mobile services, fintech, digital solutions, and more. | ||
| Leak Size | 1,400GB |
Credential Exposure for xox.com.my
We've indexed 42 @xox.com.my accounts from external breaches, plus 2,352 credentials for xox.com.my itself.
Last checked Aug 16, 2026
| @xox.com.my addresses from external breaches | |
|---|---|
| Third-party breaches | 38 accounts · across 25 breaches · 23 with a plaintext password · most recent Dec 14, 2020 |
| Combo lists | 7 accounts · most recent Aug 1, 2026 |
| Passwords for xox.com.my accounts | |
|---|---|
| Combo lists | 1,373 logins · most recent Aug 15, 2026 |
| Infostealer logs | 1,055 logins · 744 infected devices · most recent Aug 8, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
XOX was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.