Some People Have Purchased 91 Million Tokopedia Accounts Leaked
JAKARTA - The privacy and security of data stored in cyberspace is easily threatened. This time it is Tokopedia's turn, one of the big marketplaces in Indonesia that has leaked data for 91 million users, even though the data has been traded. Users are also busy talking about it on various social media platforms.
It all started with buying and selling information on the darkweb tweeted by the @UnderTheBreach account. This account informs that there are individuals who are trading data for 15 million Tokopedia users. Individuals managed to get Tokopedia account user data in March 2020. The data being traded is quite complete, starting from user ID, email, full name, date of birth, gender, cellphone number, and password which are still encrypted. 15 million user data can be obtained at a price of 10 Euros or around IDR 170 thousand.
Actor leaked the database of Tokopedia - a large Indonesian technology company specializing in e-commerce. (@ Tokopedia) - Hack occurred in March 2020 and affected 15,000,000 users though the hacker said there are many more.- Database contains emails, password hashes, names pic.twitter.com/CZTYImj6jA
- Under the Breach 🦠 (underthebreach) May 2, 2020
This is also proven by another Twitter account, @ronaldips. He and one of his friends tried to buy the data. And sure enough, they got 15 million Tokopedia user data combined in one txt file of 4.31 GB.
ehhh it turned out that a few hours later the "actor" was selling again the follow-up file which contained the complete data (91 million user data) for 5K USD and was sold on Deepweb of course and we just tried to check it and it turned out to be true * sorry some info is censored pic.twitter.com / AIypYGjVrm
- Nal D (ronaldips) May 2, 2020
A few hours later, the person opened a new sale. This time the price was US $ 5,000 or around Rp. 75 million. It is much more expensive because more data is sold. There are 91 million user data that buyers can get. Meanwhile, in September 2019, Tokopedia announced that at that time its monthly users had reached 90 million. So it can be concluded that 91 million users make sense if the data is hacked until March 2020. It is reported that three parties have purchased this full version data as of May 4, 2020 this afternoon.
Tokopedia has also informed its users that their passwords are guaranteed to be safe. Users registered since April 2020 onwards are also reportedly not hacked, but it's better to do prevention by changing their respective account passwords. In addition, credit and debit card account data are also reportedly not hacked.
Siniar VOI this time will discuss the data leak that occurred at Tokopedia, as well as information from Tokopedia regarding this leak.