Temu denies it was hacked or suffered an information breach after a menace actor claimed to be promoting a stolen database containing 87 million data of buyer data.
The menace actor put the alleged knowledge up on the market yesterday on the BreachForums hacking discussion board, together with a small pattern to function proof of the stolen knowledge.
Temu says it has examined and cross-checked the info samples with its database, however no matches had been discovered.
Hacker claims to breach Temu
Temu is a quickly rising e-commerce platform providing a variety of merchandise at aggressive costs, specializing in low-cost clothes, residence items, electronics, and equipment.
Temu is Chinese language however operates globally, together with in Europe and the USA, the place it gained reputation for its deep reductions and promotional methods.
Although Temu has confronted scrutiny over issues referring to knowledge privateness, product high quality, and delivery instances, it has not discovered itself on the epicenter of a serious knowledge breach incident as of but.
Yesterday, a menace actor utilizing the moniker ‘smokinthashit’ claimed to have stolen a database with 87 million data from Temu and tried to promote it to different cybercriminals.
The menace actor printed samples of the allegedly stolen knowledge that contained usernames and IDs, IP addresses, full names, dates of start, gender, delivery addresses, telephone numbers, and hashed passwords.
Supply: BleepingComputer
Temu says it wasn’t breached
Responding to BleepingComputer’s request for remark, Temu categorically denied the printed knowledge is theirs and mentioned it could press costs towards these spreading this misinformation.
“Temu’s safety crew has performed a complete investigation into the alleged knowledge breach and may verify that the claims are categorically false; the info being circulated just isn’t from our programs. Not a single line of knowledge matches our transaction data,” Temu informed BleepingComputer.
“We take any try to tarnish our fame or hurt our customers extraordinarily significantly and reserve the precise to pursue authorized motion towards these liable for spreading false data and trying to revenue from such malicious actions.”
“At Temu, the safety and privateness of our customers are paramount. We observe industry-leading practices for knowledge safety and cybersecurity, making certain that buyers can store with peace of thoughts on our platform.”
The e-commerce platform additionally underlined that it follows industry-leading knowledge safety and cybersecurity practices, noting the app’s MASA certification, unbiased validations, its HackerOne bug bounty program, and compliance with the PCI DSS cost safety customary.
Menace actor says the breach is actual
BleepingComputer contacted the menace actor in regards to the breach, and so they continued to say they breached Temu.
The menace actor claims to nonetheless have entry to the corporate’s e-mail and inside panels, and that there are vulnerabilities of their code.
Nonetheless, the menace actor didn’t share any proof of those claims, and BleepingComputer can’t decide whether or not they’re legitimate.
Whether or not or not the info breach claims are legitimate, they’ll nonetheless hurt a agency’s fame and seed mistrust in prospects.
Out of an abundance of warning, in case you are a Temu consumer, it could be prudent to allow two-factor authentication in your account, change the password to one thing new and distinctive, and keep vigilant for potential phishing makes an attempt.
BleepingComputer contacted Temu once more about these additional claims, however no response was instantly obtainable.