Temu denies it was hacked or suffered a knowledge breach after a risk actor claimed to be promoting a stolen database containing 87 million data of buyer data.
The risk actor put the alleged knowledge up on the market yesterday on the BreachForums hacking discussion board, together with a small pattern to function proof of the stolen knowledge.
Temu says it has examined and cross-checked the info samples with its database, however no matches had been discovered.
Hacker claims to breach Temu
Temu is a quickly rising e-commerce platform providing a variety of merchandise at aggressive costs, specializing in low-cost clothes, residence items, electronics, and equipment.
Temu is Chinese language however operates globally, together with in Europe and the US, the place it gained recognition for its deep reductions and promotional methods.
Although Temu has confronted scrutiny over considerations referring to knowledge privateness, product high quality, and transport occasions, it has not discovered itself on the epicenter of a significant knowledge breach incident as of but.
Yesterday, a risk actor utilizing the moniker ‘smokinthashit’ claimed to have stolen a database with 87 million data from Temu and tried to promote it to different cybercriminals.
The risk actor revealed samples of the allegedly stolen knowledge that contained usernames and IDs, IP addresses, full names, dates of start, gender, transport addresses, telephone numbers, and hashed passwords.
Supply: BleepingComputer
Temu says it wasn’t breached
Responding to BleepingComputer’s request for remark, Temu categorically denied the revealed knowledge is theirs and mentioned it might press fees in opposition to these spreading this misinformation.
“Temu’s security team has conducted a comprehensive investigation into the alleged data breach and can confirm that the claims are categorically false; the data being circulated is not from our systems. Not a single line of data matches our transaction records,” Temu informed BleepingComputer.
“We take any attempt to tarnish our reputation or harm our users extremely seriously and reserve the right to pursue legal action against those responsible for spreading false information and attempting to profit from such malicious activities.”
“At Temu, the security and privacy of our users are paramount. We follow industry-leading practices for data protection and cybersecurity, ensuring that consumers can shop with peace of mind on our platform.”
The e-commerce platform additionally underlined that it follows industry-leading knowledge safety and cybersecurity practices, noting the app’s MASA certification, impartial validations, its HackerOne bug bounty program, and compliance with the PCI DSS fee safety commonplace.
Risk actor says the breach is actual
BleepingComputer contacted the risk actor concerning the breach, they usually continued to say they breached Temu.
The risk actor claims to nonetheless have entry to the corporate’s e mail and inside panels, and that there are vulnerabilities of their code.
Nonetheless, the risk actor didn’t share any proof of those claims, and BleepingComputer can not decide whether or not they’re legitimate.
Whether or not or not the info breach claims are legitimate, they’ll nonetheless hurt a agency’s status and seed mistrust in clients.
Out of an abundance of warning, in case you are a Temu person, it might be prudent to allow two-factor authentication in your account, change the password to one thing new and distinctive, and keep vigilant for potential phishing makes an attempt.
BleepingComputer contacted Temu once more about these additional claims, however no response was instantly obtainable.
