NPC update on Alleged Cashalo Data Breach

Source: Straits Interactive PH
Published on: 2021-02-23 16:24

Amid recent reports on the alleged data breach on the cash-loaning application Cashalo, operated by Oriente Express Techsystem Corporation, the National Privacy Commission (NPC) did a preliminary probe on the data security issue. Initial findings show that huge amounts of personal data from Cashalo are being dumped and sold on different cyber forums since February 14, 2021. A certain user named “creepxploit” sells data of 3.3 million users of Cashalo containing their usernames, passwords, e-mail addresses, phone numbers and device identifications on two sites on the dark web. The user even provides sample data for potential buyers. Given the facts, it is suspected that the user successfully downloaded files from Cashalo’s own database, which signifies a potential breach on the application. Creepxploit’s posts remain accessible as of writing. NPC immediately reached out to Cashalo t...

(Please login to view full article)

Third-Party Content Disclaimer

Content displayed on this platform may include news articles, reports, and other materials aggregated from publicly available third-party sources through automated tools. Such content is not created, written, commissioned, or edited by Straits Interactive Pte Ltd or the Data Protection Excellence (DPEX) Network.

While we take reasonable steps to ensure responsible publication, we do not independently verify all third-party information and make no representations as to its accuracy, completeness, or reliability.

The views, findings, and statements expressed in third-party content belong solely to the original source and do not reflect the views of Straits Interactive Pte Ltd or the DPEX Network.

If you believe any content is inaccurate, infringing, or should be removed, please contact us at legal@straitsinteractive.com. We will review the matter and, where appropriate, take action in accordance with our internal policies.

Unlock these benefits
benefit

Get access to news, enforcement cases, events, and actionable tips and guides

benefit

Get regular email updates and offers

benefit

Job opportunities, mentorship and career guidance

benefit

Exclusive access to Data Protection community - ask questions, network and share knowledge with peers and experts via WhatsApp and Linkedin