A recent post on a dark web forum alleges that the Malaysian online payment platform toyyibPay has suffered a data breach. The threat actor behind the post claims to have gained access to the company’s database, which reportedly contains over 12GB of sensitive information spread across 88 CSV files.
toyyibPay, known for providing businesses and organizations with a low-cost platform to accept online payments. The threat actor claims that the compromised data includes personally identifiable information (PII), such as customer names, email addresses, and phone numbers, particularly within the platform’s billing records. The threat actor also included samples from the alleged leak
The post suggests that the data is available for sale, with the threat actor offering priority access to toyyibPay. The price for the alleged leak is 0.7 BTC. The offer includes the option for an escrow service, to ensure both parties fulfill their ends of the deal.
