Singapore e-commerce firm Lazada released a press statement notifying that personal information including addresses and partial credit card numbers had been hacked in a data breach.
According to a report by Reuters, 1.1 million accounts had been hacked, a major breach in the city-state of 5.7 million.
Lazada, an Alibaba-owned firm said that the information was taken from a database of its grocery arm RedMart that was more than 18 months out of date.
The statement said, “the customer data hosted on this database is more than 18 months out of date as it was last updated in March 2019. The customer information that was illegally accessed include the names, phone numbers, emails, addresses, encrypted passwords and partial credit card numbers of RedMart customers. We have taken immediate action to block unauthorised access to the database. This data was used on the previous RedMart app and website, which are no longer in use. Lazada customer data in Southeast Asia is not affected by this incident.”
The firm also said it had immediately moved to block access to the database and that its current customer data was not affected.