Hacker leaks 15 million records from Tokopedia, Indonesia's largest online store

guest · May 2, 2020

Hacker leaks 15 million records from Tokopedia, Indonesia's largest online store
The Tokopedia data has been published on a well-known hacking forum
May 2, 2020
https://www.zdnet.com/article/hacke...om-tokopedia-indonesias-largest-online-store/

A hacker has leaked on Friday the details of 15 million users registered on Tokopedia, Indonesia's largest online store.
The hacker claims the data was obtained in an intrusion that took place in March 2020 and is just a small part of the site's entire user database that was obtained in the hack.

The leaker said he was sharing the 15 million users sample in the hopes someone could help crack the user passwords, so they could be used to access user accounts.
ZDNet has obtained a copy of the leaked file with the help of data breach monitoring service Under the Breach.
Click to expand...

An email containing a request for comment sent to Tokopedia returned an error message, but the company has told Under The Breach in a private online conversation that they are investigating the incident.
For the time being, Tokopedia users are advised to reset their account passwords.

The hacker also said the database didn't contain the "salt" random strings used to improve the security of the SHA2-384 hashing function. Without the salt, cracking the passwords would be a more time-consuming task, giving users enough time to change passwords in the coming days.
Click to expand...

guest · May 3, 2020

Indonesia’s Tokopedia begins probe after data of 91 million users allegedly leaked
May 3, 2020
https://www.hindustantimes.com/tech...edly-leaked/story-gLDsbjHc16S4UPD2ZKLJeJ.html

Tokopedia, Indonesia’s largest e-commerce platform, said it was investigating an attempted hack and claims that the details of millions of its users had been leaked online.

“We found that there had been an attempt to steal data from Tokopedia users,” a spokesman for the company said in a statement late Saturday.
“At this moment, we continue to investigate further into this matter and there is no additional information that we can share,” the statement added.
A Tokopedia spokesman declined to comment directly on the hacker’s claims, but told Reuters on Sunday that “all transactions with all payments methods at Tokopedia ... remain secure.”
Click to expand...

Reuters: Indonesia's Tokopedia probes alleged data leak of 91 million users

guest · May 3, 2020

Data has been added to Have I Been Pwned:

Tokopedia – 12,115,583 breached accounts

Tokopedia
In April 2020, Indonesia's largest online store Tokopedia suffered a data breach. The incident resulted in 15M rows of data (allegedly a subset of the complete breach) being posted to a popular hacking forum. The data included over 12M unique email addresses alongside names, genders, birth dates and passwords stored as SHA2-384 hashes.

Breach date: 17 April 2020
Date added to HIBP: 2 May 2020
Compromised accounts: 12,115,583
Compromised data: Dates of birth, Email addresses, Genders, Names, Passwords
Permalink
Click to expand...

guest · May 13, 2020

Tokopedia appoints independent cybersecurity company to investigate data theft
May 12, 2020
https://www.thejakartapost.com/news...curity-company-to-investigate-data-theft.html

E-commerce platform Tokopedia has announced that it has appointed an independent global institution specializing in cybersecurity to improve its security system following the recent data breach that affected millions of its users.

The decision was publicized in a letter sent by the Tokopedia CEO William Tanuwijaya to all its users on Tuesday, more than a week after the report on the data breach circulated.

“On May 2, 2020, we became aware of a theft of Tokopedia users’ personal data by an unauthorized third party,” William said in the letter.
William continued by saying that the company continuously built, developed and improved its procedures and prevention and mitigation measures in its security systems according to the best standards in the world.
Click to expand...

Previously, Communications and Information Minister Johnny G. Plate said that users' financial data were “safe” after a meeting with Tokopedia’s board of directors.

“Tokopedia has explained that user accounts and financial data are safe,” the minister said. “It was conveyed [during the meeting that Tokopedia’s] security system cannot be breached, although data relating to names, emails and telephone numbers may have partly been accessed by hackers.”
Click to expand...

Log in or Sign up

Hacker leaks 15 million records from Tokopedia, Indonesia's largest online store

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

Hacker leaks 15 million records from Tokopedia, Indonesia's largest online store

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches