Chinese marketplace Temu denies breach after hacker claims major customer data heist

Chinese online marketplace Temu has denied allegations of suffering a data security incident after a threat actor claimed they infiltrated its network and stole as many as 87 million customer data records.

Recently, a threat actor going by the name “smokinthashit” claimed that they breached the internal network of Temu and stole a database containing 87 million records of customer data. The threat actor has offered to sell the database and has uploaded a sample of the stolen data on their dark web channel to prove its authenticity.

According to Bleeping Computer, the sample database contains usernames and IDs, IP addresses, full names, dates of birth, gender, shipping addresses, phone numbers, and hashed passwords.

Temu has, however, refuted the claims of the threat actor, stating that it has verified the sample data uploaded by the threat actor and found no match with its customer database.

In a statement shared with the Bleeping Computer, the e-commerce platform said, “Temu’s security team has conducted a comprehensive investigation into the alleged data breach and can confirm that the claims are categorically false; the data being circulated is not from our systems. Not a single line of data matches our transaction records.

“We take any attempt to tarnish our reputation or harm our users extremely seriously and reserve the right to pursue legal action against those responsible for spreading false information and attempting to profit from such malicious activities.

‘At Temu, the security and privacy of our users are paramount. We follow industry-leading practices for data protection and cybersecurity, ensuring that consumers can shop with peace of mind on our platform.”

Temu added that it will press charges against those spreading this incorrect information. The threat actor, when contacted by Bleeping Computer, said that the company is hiding the truth and claims to still have access to the company’s email and internal panels and that there are vulnerabilities in Temu’s codes.