Tokopedia hacked – Login details of 91 million users sold on dark web

Tokopedia hacked – Login details of 91 million users sold on dark web

The Indonesian e-commerce giant has over 90 million users.


Another day, another data breach – This time hackers have targeted Tokopedia and as a result, personal and login credentials of 91 million users are being sold on a dark web marketplace for $5000.


Tokopedia is an Indonesian technology company specializing in e-commerce. Founded in 2006; the company has become a giant with more than 91 million registered users/customers and over 7 million merchants.


See: Exclusive: Personal data of 1.41m US doctors sold on hacker forum


However, the bad news for Tokopedia users is that apparently, the company has suffered a massive breach and personal data of users is at risk. This data includes:


GenderLocationUsernameFull nameEmail addressPhone numbersHashed password

Although yet unconfirmed; it seems like the database does not contain payment card data of users or merchants.



Screenshot from the dark web marketplace where Tokopedia’s data is being sold (Image credit: Hackread.com)



The data breach monitoring firm Under the Breach who is familiar with the incident has confirmed to Hackread.com that the database being traded online contains authentic data belonging to Tokopedia and includes data till March 2020. We have also seen the sample data and can confirm that Tokopedia has indeed suffered a breach.


Preview of sample data is available below:



Sample data



< ..

Support the originator by clicking the read the rest link below.