Data breach: Not our fault say Lazada

[rooster59]

Data breach: Not our fault say Lazada

 

Image: Sanook

 

Online retailer Lazada has denied that it was behind a data breach.

 

An underground trading forum was found to be offering data for sale from perhaps up to 13 million customers including names,email addresses and phone numbers.

 

It was claimed that the seller of the data was working in Lazada's Thai office, something the company has denied. 

 

The data was two years old related to 2018.

 

Digital Economy and Society minister Buddhipongse Punnakanta is due to be meeting e-commerce operators in the coming week to discuss ways to improve data protection. 

 

Source: Sanook

 

-- © Copyright Thai Visa News 2020-11-21

 

- Whatever you're going through, the Samaritans are here for you

- Follow Thaivisa on LINE for breaking COVID-19 updates

[Salerno]

19 minutes ago, rooster59 said:

Data breach: Not our fault say Lazada

 

Uhhhh, yes, it is.

[kotsak]

No matter what they, I changed my password just in case.. 

[jgm005]

I to changed my password. It was not very strong.  Made sure I did not accidently save any credit card information on my account.  Told the GF to do the same

[AhFarangJa]

Luckily I only pay cash on delivery so they do not have any card details. Will still change my password though to be safe.

[Carlosm]

I've been with Lazada for a long time now and over the past few years since i changed my bank account have only used C.O.D., 2 reasons, 1. safer if my acc gets hacked, and, 2. delivery is way faster as they want their money and dont get it till its arrived.

[tgw]

Quote

It was claimed that the seller of the data was working in Lazada's Thai office, something the company has denied. 

 

hmmm...

this line is very disturbing, because to deny it, Lazada needs to know who the seller is.

[Traubert]

3 minutes ago, tgw said:

 

hmmm...

this line is very disturbing, because to deny it, Lazada needs to know who the seller is.

Or where the data was stored....

[FitnessHealthTravel]

Seems to be the new world mantra 'Not Our Fault' Seriously does anyone take responsibility for their actions anymore?

[tgw]

16 minutes ago, Traubert said:

Or where the data was stored....

 

nope. anyone with legal or illegal access could have taken it. storage location is irrelevant, since I don't believe Lazada keeps this information on a separate notwork not connected to the internet...

 

 

Edited November 22, 2020 by tgw

[ICELANDMAN]

It's my GF's phone number, I'm not worried

[hotchilli]

20 hours ago, rooster59 said:

It was claimed that the seller of the data was working in Lazada's Thai office, something the company has denied.

Lol... I use COD only... no-way they get my credit details.

[GreasyFingers]

Maybe this explains why I get the occasional SMS from unknown companies giving me a web link. As I do not have internet on my phone it is not really a problem as I cannot reply. No contact through my email though.

[ChaiyaTH]

5 hours ago, hotchilli said:

Lol... I use COD only... no-way they get my credit details.

CC details are not kept in plain data, in some database. So that wouldn't be a threat anyway. It is like 9/10 more likely to get your CC details stolen while traveling, in hotels and such. That is also how all passport copies end up in the dark web.

 

Quite easy money for a person working at the lobby, underpaid, seeing tens of passports daily (which they usually scan).

Edited November 22, 2020 by ChaiyaTH

[jchfriis]

Lazada system is <deleted>. I'm trying to log in to my account and the site wants to verify my identity which is fine with me. To do that they send me a code by e-mail. But by the time the e-mail arrives the code is unusable because the system only gives you one minute! Now who in their right mind designs it like that.

[hotchilli]

10 hours ago, ChaiyaTH said:

CC details are not kept in plain data, in some database. So that wouldn't be a threat anyway. It is like 9/10 more likely to get your CC details stolen while traveling, in hotels and such. That is also how all passport copies end up in the dark web.

 

Quite easy money for a person working at the lobby, underpaid, seeing tens of passports daily (which they usually scan).

13 million people?

[techietraveller84]

Apparently Shopee and Line were affected as well.

 

"Lazada said that it was not the only company affected by the hack and said that Line and Shopee were implicated as well."

 

Bad day for data security.

 

https://www.thaienquirer.com/20953/lazada-suffers-data-hack-of-13-million-accounts/