Bukalapak targeted by hacker, but ‘important’ user data remain secure

Indonesian ecommerce unicorn Bukalapak denies that 13 million of its user accounts were hacked, though the company admits that it was the target of a security breach.

According to a company statement, “confidential, important, and private data such as user passwords and financial information remain secure despite [a] past attempt made on Bukalapak’s old and stale information.”

A Pakistani hacker who goes by the alias Gnosticplayers claims that he had stolen 27 million user records from six websites, including Bukalapak. The accounts were allegedly put up for sale on a dark web market called Dream Market for roughly US$5,000 worth of bitcoin.

Another Indonesian startup, Youthmanual, was also targeted. In past operations, the same hacker had stolen user data from fitness apps ClassPass and MyFitnessPal, as well as the dating app CoffeeMeetsBagel, among others.