ResistMobi Alleged Data Exposure
The ResistMobi 2026 data breach occurred in January 2026 when an Elasticsearch/OpenSearch database backup from the Resist mobile application (resist.mobi) was compromised and released publicly.
Exposed Data Types
5- Email addresses
- Usernames
- Geographic locations
- IP addresses
- Website activity
About This Record
What information was compromised in the ResistMobi incident?
Verified exposed data classes in the JSON export include:
- Identity & Contact Details: User handles, names, and registered email addresses.
- Geographic Location Data: Precise latitude and longitude coordinates and regional metadata.
- Application Engagement: Volunteer/host preferences, last login timestamps, and content activity logs.
How many accounts were affected?
Canonical RFC 5322 ASCII validation, excluding non-routable local testing placeholders, verified 3,639 unique valid email addresses.
Security advisory & recommendations
The combination of geographic coordinates and email addresses introduces targeted phishing and privacy exposure risks. Users should remain vigilant regarding unsolicited communications.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
