Tokopedia, Indonesia's largest online store experienced a data breach that compromised the details of 15 million users registered on it.
A small part of the site's entire user database was obtained in the hack.
The hacker shared a file having a PostgreSQL database dump, containing user information such as full names, emails, phone numbers, hashed passwords, dates of birth, and Tokopedia profile-related details (account creation date, last login, email activation codes, password reset codes, location details, messenger IDs, hobbies, education, about-me fields, and lots more).
the hacker leaked the data saying that someone could help crack the user passwords, and access user accounts.
"id": "TOK12641222",
"linkid": "pt--tokopedia",
"type": "Breach",
"date": "05/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"