Mercado Libre

Argentinian e-commerce giant Mercado Libre recently suffered a data breach incident initiated by the Lapsus$ hacker group.

Its source code was compromised to unauthorized access that leaked around 300,000 of its users.

The company immediately activated security protocols and started the investigation.

Source: https://www.bleepingcomputer.com/news/security/e-commerce-giant-mercado-libre-confirms-source-code-data-breach/

TPRM report: https://scoringcyber.rankiteo.com/company/mercadolibre

"id": "mer04623322",
"linkid": "mercadolibre",
"type": "Breach",
"date": "03/2022",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': '300,000',
                        'industry': 'Retail',
                        'location': 'Argentina',
                        'name': 'Mercado Libre',
                        'type': 'e-commerce company'}],
 'attack_vector': 'Source Code Compromise',
 'data_breach': {'number_of_records_exposed': '300,000'},
 'description': 'Argentinian e-commerce giant Mercado Libre recently suffered '
                'a data breach incident initiated by the Lapsus$ hacker group. '
                'Its source code was compromised to unauthorized access that '
                'leaked around 300,000 of its users. The company immediately '
                'activated security protocols and started the investigation.',
 'impact': {'data_compromised': '300,000 user records'},
 'investigation_status': 'Ongoing',
 'response': {'incident_response_plan_activated': 'Yes'},
 'threat_actor': 'Lapsus$ Hacker Group',
 'title': 'Data Breach at Mercado Libre by Lapsus$ Hacker Group',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unauthorized Access'}