Data Breach: Bukalapak

On April 12 2019, Bukalapak posted a disclosure outlining an unauthorized access of their cold storage systems that contained sensitive user data. This unauthorized access leaked 13 Million rows of email, IP addresses, names and bcrypt and salted SHA-512 passwords. Every account created in 2017 might be compromised. The company said they moved their cold storage systems to a “safer location” and reset passwords of all users who made an account in 2017.

Recommendations

• If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
• If one of your entities receives an alert ZeroFOX recommends immediate password changes for the affected account
• Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
• Remain alert to potential spear phishing attacks through email and social media.

Details

Bukalapak is a private held technology company from Indonesia and is one of the largest e-commerce in South-East Asia. Customers that created their accounts in 2017 might have been affected by this breach. Bukalapak reactively forced users to enable two-factor authentication, reset the passwords of all affected accounts and migrated all backup information into a more secure environment. The company also hired a third-party forensic company to help with the investigation.