Threat Actor Allegedly Claims Database Leak of Pandabuy, Exposing Customers Data

April 2024, a significant data breach allegedly occurred involving Pandabuy, a store company, where almost 3 million rows of data were posted to a popular hacking forum. The breach was a result of exploiting multiple critical vulnerabilities within the platform’s API, alongside other identified bugs that granted access to the website’s internal services. The compromised data includes over 3 million unique user IDs, along with their associated first names, last names, phone numbers, email addresses, login IPs, order data, order IDs, home addresses, ZIP codes, country information, and possibly additional details. This breach represents a serious threat to the privacy and security of Pandabuy’s customers, necessitating immediate action to mitigate further risks and protect affected individuals.