Neigbuy and TVB: Suspected cyberattack puts data of 33,054 customers using group-buying app at risk

Neigbuy Data Breach Exposes Personal Data of 33,000 Customers in Suspected Cyberattack

Hong Kong’s Office of the Privacy Commissioner for Personal Data (PCPD) has launched an investigation into a suspected cyberattack on Neigbuy, a group-buying platform majority-owned by TVB. The breach, detected on August 24, compromised the personal data of 33,054 customers, including names, addresses, emails, phone numbers, and online shopping order histories.

Neigbuy, founded in 2018, offers limited-time deals on groceries, household goods, and other products. The company reported the incident to the PCPD on September 1, prompting the watchdog to initiate a formal probe. Authorities have since received six reports of scammers impersonating Neigbuy staff, raising concerns over potential fraud.

The PCPD confirmed the breach but has not yet disclosed the exact cause or perpetrators behind the unauthorized data access. The incident underscores growing cybersecurity risks for e-commerce platforms handling sensitive customer information.

Source: https://www.scmp.com/news/hong-kong/law-and-crime/article/3366021/suspected-cyberattack-puts-data-33054-customers-group-buying-app-risk

Neigbuy 鄰住買 cybersecurity rating report: https://www.rankiteo.com/company/neigbuy

TVB Limited cybersecurity rating report: https://www.rankiteo.com/company/tvb

"id": "NEITVB1788273800",
"linkid": "neigbuy, tvb",
"type": "Breach",
"date": "8/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '33,054',
                        'industry': 'E-commerce',
                        'location': 'Hong Kong',
                        'name': 'Neigbuy',
                        'type': 'Group-buying platform'}],
 'data_breach': {'number_of_records_exposed': '33,054',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Addresses',
                                              'Emails',
                                              'Phone numbers',
                                              'Online shopping order '
                                              'histories']},
 'date_detected': '2024-08-24',
 'date_publicly_disclosed': '2024-09-01',
 'description': 'Hong Kong’s Office of the Privacy Commissioner for Personal '
                'Data (PCPD) has launched an investigation into a suspected '
                'cyberattack on Neigbuy, a group-buying platform '
                'majority-owned by TVB. The breach, detected on August 24, '
                'compromised the personal data of 33,054 customers, including '
                'names, addresses, emails, phone numbers, and online shopping '
                'order histories. Authorities have received six reports of '
                'scammers impersonating Neigbuy staff, raising concerns over '
                'potential fraud.',
 'impact': {'brand_reputation_impact': 'Potential fraud concerns due to '
                                       'scammers impersonating Neigbuy staff',
            'data_compromised': 'Personal data of 33,054 customers, including '
                                'names, addresses, emails, phone numbers, and '
                                'online shopping order histories',
            'identity_theft_risk': 'High'},
 'investigation_status': 'Ongoing',
 'references': [{'source': 'Office of the Privacy Commissioner for Personal '
                           'Data (PCPD)'}],
 'regulatory_compliance': {'regulatory_notifications': 'Reported to PCPD on '
                                                       '2024-09-01'},
 'title': 'Neigbuy Data Breach Exposes Personal Data of 33,000 Customers in '
          'Suspected Cyberattack',
 'type': 'Data Breach'}