Hackers used earlier data breach to login to 20 million Taobao accounts, faking orders and selling customer data to fraudsters

Briefing

Hackers used earlier data breach to login to 20 million Taobao accounts, faking orders and selling customer data to fraudsters

February 5, 2016

Briefing

  • Earlier Data Breach – Hackers obtained username and password information of 99 million accounts from different Chinese websites
  • Unauthorized Logins – Data obtained was used to login to 20 million Taobao accounts using Alibaba’s cloud computing service from mid-October 2015
  • Reported to Authorities – Incident was reported to authorities in November 2015 when it was first discovered by Taobao
  • Illegal Activity – Hackers faked orders on Taobao, used to raise seller profiles illegally, and sold accounts for use in fraud

Accelerator

Sector

Information Technology, Wholesale and Retail Trade

Organization

Alibaba Group Holding Ltd., Zhejiang Taobao Network Co. Ltd.

Source

Original Publication Date

February 4, 2016

Leave a comment