SINGAPORE: Personal information from 1.1 million RedMart accounts was stolen from e-commerce platform Lazada and sold online in a data breach.
A Lazada spokesperson confirmed this to CNA on Friday (Oct 30).
AdvertisementAdvertisementCNA had earlier come across an online forum which was purportedly selling personal data from various e-commerce sites around the world, including Lazada.
The site claimed to have information like names, phone numbers and partial credit card numbers from about 1.1 million users.
[h=3]READ: Lazada to fold RedMart into its platform, signals entry into online supermarket business[/h]
Screengrab of the online forum which is purportedly selling personal data from various e-commerce sites around the world, including Lazada.
AdvertisementAdvertisement"Our cybersecurity team discovered an individual claiming to be in possession of a RedMart customer database taken from a legacy RedMart system no longer in use by the company," a spokesperson from Lazada said in a statement referring to the online supermarket platform it acquired in 2016.
Lazada added the information stolen was last updated in March 2019, and the affected RedMart-only database is not linked to any Lazada database.
"This RedMart-only information is more than 18 months out of date and not linked to any Lazada database. The user information that was illegally accessed include names, phone numbers, email and mailing addresses, encrypted passwords and partial credit card numbers. We have taken immediate action to block unauthorised access to the database."
Lazada is currently investigating the data breach, and has informed the Personal Data Protection Commission of the breach.
Advertisement"We have taken immediate action to block unauthorised access to the database," the Lazada spokesperson said.
A spokesperson for the Personal Data Protection Commission said it was aware of the incident and was looking into the matter.
Lazada said it was in the process of reaching out to all affected customers, and reminding them to change their log-in credentials as a safety precaution.
It added: “Protecting the data and privacy of our customers is a top priority, and we are working swiftly to resolve this."
Let's block ads! (Why?)
More...
A Lazada spokesperson confirmed this to CNA on Friday (Oct 30).
AdvertisementAdvertisementCNA had earlier come across an online forum which was purportedly selling personal data from various e-commerce sites around the world, including Lazada.
The site claimed to have information like names, phone numbers and partial credit card numbers from about 1.1 million users.
[h=3]READ: Lazada to fold RedMart into its platform, signals entry into online supermarket business[/h]
AdvertisementAdvertisement"Our cybersecurity team discovered an individual claiming to be in possession of a RedMart customer database taken from a legacy RedMart system no longer in use by the company," a spokesperson from Lazada said in a statement referring to the online supermarket platform it acquired in 2016.
Lazada added the information stolen was last updated in March 2019, and the affected RedMart-only database is not linked to any Lazada database.
"This RedMart-only information is more than 18 months out of date and not linked to any Lazada database. The user information that was illegally accessed include names, phone numbers, email and mailing addresses, encrypted passwords and partial credit card numbers. We have taken immediate action to block unauthorised access to the database."
Lazada is currently investigating the data breach, and has informed the Personal Data Protection Commission of the breach.
Advertisement"We have taken immediate action to block unauthorised access to the database," the Lazada spokesperson said.
A spokesperson for the Personal Data Protection Commission said it was aware of the incident and was looking into the matter.
Lazada said it was in the process of reaching out to all affected customers, and reminding them to change their log-in credentials as a safety precaution.
It added: “Protecting the data and privacy of our customers is a top priority, and we are working swiftly to resolve this."
Let's block ads! (Why?)
More...