CYBERSECURITY

PandaBuy Data Breach Exposes Over 1.3 Million Customer Records

Over 1.3 million customer records from the PandaBuy online shopping platform have been compromised in a significant data breach, reportedly orchestrated by two threat actors exploiting multiple system vulnerabilities.

A platform facilitating international purchases from various Chinese e-commerce platforms like Tmall, Taobao, and JD.com, fell victim to the breach, PandaBuy which was disclosed recently by a threat actor known as ’Sanggiero,’ purportedly in collaboration with another actor named ’IntelBoker.’

The breach was executed by exploiting critical vulnerabilities in PandaBuy’s API and other system bugs, providing unauthorized access to internal services. The stolen data, encompassing over 3 million unique UserId entries, included personal information such as first and last names, phone numbers, email addresses, login IPs, order details, home addresses, zip codes, and countries.

According to data breach aggregator Have I Been Pwned (HIBP), 1,348,407 PandaBuy accounts were exposed. The compromised details were made available on a forum accessible to registered members for a nominal payment in cryptocurrency.

To validate the authenticity of the leaked information, the threat actor released a small sample containing email addresses, customer names, order details, shipping addresses, transaction timestamps, and payment IDs. Troy Hunt, the creator of HIBP, verified the legitimacy of approximately 1.3 million email addresses through password reset tests, indicating their association with PandaBuy accounts. However, it was revealed that the reported “threat actors inflated 3 million” figures through fabricated and duplicate addresses.

Despite the severity of the breach, PandaBuy has not issued any official statements regarding the incident. Reports suggest attempts by the company to suppress the breach’s visibility by censoring user discussions on platforms like Discord and Reddit.

An administrator on PandaBuy’s Discord channel acknowledged a past security incident but dismissed the leaked data as old, assuring prompt action from the security team. https://www.teiss.co.uk/        

Leave a Response

bahis canlı casino siteleri canlı bahis siteleri