The personal data of 2.8 million Eatigo has been stolen and leaked to an illegal forum, where it is being offered for sale.
According to The Sunday Times, in an email sent by Eatigo to its affected customers on Saturday, the online platform said the stolen information included 18 months of records and details such as names, email addresses and phone numbers.
“We were informed on October 30 that together with many other e‑commerce platforms, we were the subject of a data security incident”, the company said.
“Your existing eatigo account password is protected by encryption and is therefore secure. We do not store credit card in our system.”
Eatigo in turn informed the Personal Data Protection Commission (PDPC) about the breach on Friday.
As an Eatigo spokesperson told ST, the stolen information came from an old database that was last updated in 2018 and is no longer in use.
The news of the data breach comes just a day after e-commerce giant Lazadaconfirmed that the personal information of 1.1 million RedMart had been stolen.
The stolen information from Lazada also included 18 months of files, but it is not known whether the two incidents are related.
Eatigo informed its customers that it is already cooperating with the authorities regarding the incident and has also created a support team, which users to be informed about the breach.
Also, he/she advised clients to log into their accounts and reset their passwords as a precautionary measure and to be careful of any unwanted email messages that request personal or sensitive information. The PDPC said it is aware of the issue and has already launched an investigation.
