Professional Documents
Culture Documents
nal information from 1.1 million RedMart accounts for sale online - CNA
Top Stories Latest News Discover Singapore Asia Commentary Sustainability CNA Insider Lifestyle Watch Listen
ADVERTISEMENT
Singapore
Lazada suffers data breach; personal information from 1.1 million RedMart accounts for
sale online
Jeraldine Yap
30 Oct 2020 08:55PM | (Updated: 30 Oct 2020 11:36PM)
SINGAPORE: Personal information from 1.1 million RedMart accounts was stolen from e-commerce platform Lazada and sold
online in a data breach.
ADVERTISEMENT
CNA had earlier come across an online forum which was purportedly selling personal data from various e-commerce sites around
the world, including Lazada.
The site claimed to have information like names, phone numbers and partial credit card numbers from about 1.1 million users.
READ: Lazada to fold RedMart into its platform, signals entry into online supermarket business
https://www.channelnewsasia.com/singapore/lazada-redmart-data-breach-personal-information-millions-account-1305061 1/4
10/14/21, 6:57 AM Lazada suffers data breach; personal information from 1.1 million RedMart accounts for sale online - CNA
Top Stories Latest News Discover Singapore Asia Commentary Sustainability CNA Insider Lifestyle Watch Listen
Screengrab of the online forum which is purportedly selling personal data from various e-commerce sites around the world, including Lazada.
"Our cybersecurity team discovered an individual claiming to be in possession of a RedMart customer database taken from a legacy
RedMart system no longer in use by the company," a spokesperson from Lazada said in a statement, referring to the online
supermarket platform it acquired in 2016.
Lazada added that the information stolen was last updated in March 2019, and the affected RedMart-only database is not linked to
any Lazada database.
ADVERTISEMENT
"This RedMart-only information is more than 18 months out of date and not linked to any Lazada database. The user information that
was illegally accessed include names, phone numbers, email and mailing addresses, encrypted passwords and partial credit card
numbers. We have taken immediate action to block unauthorised access to the database."
Lazada is investigating the data breach and has informed the Personal Data Protection Commission.
"We have taken immediate action to block unauthorised access to the database," the Lazada spokesperson said.
"Protecting the data and privacy of our customers is a top priority, and we are working swiftly to resolve this."
NEW PASSWORDS
ADVERTISEMENT
In an email to customers, Lazada said it discovered the breach on Thursday as part of its "proactive monitoring", adding that its
current customer data is not affected.
"As a further security measure, we have logged you out of your existing account and you will be requested to input a new password
upon your login."
It also warned customers to be on the alert for spam emails requesting personal information.
"Lazada does not request customers to verify your personal information," it added.
ADVERTISEMENT
https://www.channelnewsasia.com/singapore/lazada-redmart-data-breach-personal-information-millions-account-1305061 2/4