Major Chinese logistics company, Yuantong Express (YTO Express), has allegedly suffered a significant data breach, with a threat actor claiming to be selling 7.4 million records of user information. YTO Express, headquartered in Shanghai, is one of the leading express delivery companies in China, playing a crucial role in the country’s massive e-commerce and logistics network. The company provides a wide range of domestic and international delivery services, making it a vital part of the supply chain for numerous businesses and individual consumers.
The individual or group behind the alleged sale posted in an online forum, claiming the compromised data includes a variety of sensitive customer details. While the authenticity of the data is yet to be fully verified, the sample provided in the post suggests that the information could be extensive. The news highlights the persistent and evolving threats facing large organizations that handle substantial volumes of personal data.
The following data types are allegedly included in the breach:
- Names
- Addresses
- Telephone numbers
- Product names