SINGAPORE – A database of user accounts believed to have been stolen from online marketplace Carousell is being sold on the Dark Web and hacking forums, checks by The Sunday Times found.
The database, allegedly containing the information of 2.6 million accounts, is being sold for $1,000. Carousell said on Friday that 1.95 million user accounts were affected.
It informed affected users on Friday evening that their data was compromised after a bug was introduced during a system migration and used by a third party to gain unauthorised access. The bug has been fixed, said its spokesman.
It assured users that no credit card and payment-related information was compromised.
The leak contains victims’ usernames, first and last names, e-mail addresses, mobile phone numbers, country of origin, date of account creation and number of followers.
