Carousell hit by data breach, users' email addresses and mob...

SINGAPORE: E-commerce platform Carousell notified its users on Friday (Oct 21) of a data breach that occurred on Oct 14. Data that was exposed by the breach include users' registered email addresses and mobile numbers. The platform informed users whose accounts were affected by the breach via email, and did not detail why it took a week to notify users. CNA has contacted Carousell for more information. "Based on our investigations, a bug was introduced during a system migration and was used by a third party to gain unauthorised access to personal data of certain users in Singapore," said the platform in its notice to affected users. "We have taken actions in connection with this issue and have fixed the bug to prevent any further unauthorised access to personal information. Our team is also working on security enhancement features to better protect our community and prevent similar ...