JAKARTA - 13 million records of user accounts for the e-commerce site Bukalapak were suspected of being broken by hackers. The data set has even been traded on hacker forums, namely RaidForums.

This news emerged, shortly after the appearance of data from 91 million Tokopedia user accounts in the same forum. Bukalapak is also responding to rumors of leakage of account data records. The company says that consumer data remains safe.

"At Bukalapak, user data security is our top priority, so from time to time, we always implement various efforts to improve the safety and comfort of Bukalapak users and ensure user data is not misused," said Bukalapak Chief Executive Officer, Rachmat Kaimuddin in written statement received by VOI, Wednesday, May 6.

Rachmat also explained that currently Bukalapak has continued to improve its overall user data security system since the data breach last year. No doubt, Bukalapak also implements a layered security system as a guarantee for its customers.

The company also stores sensitive data such as KTP in special storage for a certain period of time. This data can be automatically deleted to protect user privacy.

On the other hand, Bukalapak also appealed to users to maintain the security of their accounts. You do this by regularly changing passwords, activating two-step verification, being careful of phishing, updating personal data regularly, and securing financial data.

Previously, there were four hackers who were selling Bukalapak user account data records in a hacker forum. One member of the forum, whose username is Asian Boy, claims to have a database including the password from the Bukalapak account since 2017.

"I sold Bukalapak.com database, 12,960,526 users," wrote the Asian Boy account in a thread on the forum.

Screenshot of Bukalapak account data record on the Hacker forum

The data sold starts from e-mail, user name, password, salt, last login, Facebook e-mail, user address, birthday, and telephone number. Even though the Asian Boy account does not yet have a reputation since it was only April 2020 to join, he has also sold data from the Classpass and Reverbnation sites.

Meanwhile, the Tryhard User account also sold 12 million Bukalapak data. Even the data that he displayed, it was seen that Bukalapak founder Fajrin Rasyid had an e-mail address [email protected], to Bukalapak CEO Ahmad Zaky with e-mail [email protected].

"Selling Bukalapak.com database," wrote the Tryhard User account.


The English, Chinese, Japanese, Arabic, and French versions are automatically generated by the AI. So there may still be inaccuracies in translating, please always see Indonesian as our main language. (system supported by DigitalSiber.id)