Breach Disclosure: Tokopedia

Indonesia’s largest online store group, Tokopedia, has experienced a data breach resulting in exposure of data belonging to 91 million users. 15 million records are being offered for sale on hacking forum RaidForums. The remainder of the breached data is available for sale on a separate forum for a price of $5000. Breached records include name, password, email address and phone numbers of Tokopedia users.

Recommendations

Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account.

Details

On Friday, a hacker leaked 15 million records of Tokopedia users, on a public hacking forum.

Figure 1: Leak related to Tokopedia on a hacker forum

Later, the same actor was found selling the complete leaked Tokopedia database of 91 million users on a separate dark web forum for $5000.

The actor claims that the site was hacked in March 2020. Exposed information includes name, password, email address and phone numbers of Tokopedia users.

Figure 2: Second post from the hacker selling 91 Million user records

Figure 3: Tokopedia records for sale on a dark web marketplace