Carousell data breach exposes email and mobile numbers

WhatsAppWhatsAppFacebookFacebookTwitterTwitterPinterestPinterestRedditRedditGmailGmailShareShare

On Friday (Oct. 21), e-commerce company Carousell informed its subscribers of a data breach that happened on Oct. 14.

The breach revealed the registered email addresses, mobile phone numbers, and dates of birth of users.

The platform notified affected consumers by email, but did not specify in the message why the notification took a week.

In response to CNA questions, a Carousell spokeswoman stated on Friday evening, “We sent out this message as quickly as we could.”

“At the time of discovery, our first priority was to confirm that the source of the problem had been fixed and to determine the scope of the breach in order to alert the Personal Data (Protection) Commission of Singapore.”

“Thereafter, our team spent hours examining the data in order to provide entire information to our affected users, i.e., to identify for each user which types of data were compromised.”

According to Carousell’s notification to impacted users, a defect introduced during a system migration was exploited by a third party to gain unauthorized access to the personal information of some Singaporean users.

Keep Reading

It stated that it has “taken action” in response to the issue and has corrected the flaw to avoid unauthorized access to personal information in the future.

Our team is currently investigating the situation and developing security enhancements to prevent future occurrences of this type of incident. We are also conducting an inquiry with the relevant authorities, added the spokeswoman.

The company regrets the event sincerely and extends its sincerest apologies, the representative continued.

In its notification to users, Carousell reassured individuals who utilized its in-app payment option that no credit card or payment-related information was compromised.

It was said that no password-related information was exposed and that the incident was unlikely to result in identity theft because it did not include users’ NRIC numbers.

The message warned that sharing your mobile number and/or email address could make you more exposed to phishing attempts.

Users have been warned to be wary of phishing emails and text messages.

“Carousell will never ask our users to share personal information via email or in-app chat, and we ask that you do not respond to any communications that request information such as your passwords,” the spokesman stated.

Carousell will introduce automated and manual review methods for any external application programming interfaces (APIs) to guarantee that personal data is not exposed to unauthorised individuals, according to the spokeswoman.

Burapha

Sawadee-khrup. I am a multicultural Thai newswriter that is always on the lookout for daily news that are intriguing and unique in my native country Thailand.

Recent Posts

Malaysia Mandates Stamp Duty on All Job Contracts Starting 2026

All employment contracts signed after January 1, 2026 in Malaysia will now need a stamp duty as a measure to…

June 10, 2025

Catch up the complete track list & it’s metaphor of “CRAVITY”s second album ‘Dare to Crave’

The upcoming second album ‘Dare to Crave’ and its concept video showcased the central theme of the band grapes which…

June 10, 2025

‘Ironheart’ upcoming 2025 Series: Who is ‘Ironheat’, the successor of Tony Stark?

Ahead of the global release of the mini series  ‘Ironheart’ Marvel Entertainment has released the second trailer that runs for…

June 10, 2025

“The Man of Classical Shots” Ruturaj Gaikwad to debut in the County Championship!

By signing the opportunity to play in the County Championship, the Indian opener and the skipper of CSK Ruturaj Gaikwad…

June 10, 2025

Jacky Cheung Concert 2025: All Registration Details!

The 60+ Concert Tour of outstanding Cantonese pop star Jacky Cheung in 2025 has prompted KrisFlyer to give its members…

June 10, 2025

Sri Lanka Cricket Awards 2024 Winners: Skipper Chamari dominates in all categories!

To celebrate and honor the excellent talents who are contributing to the pride of Sri Lanka Cricket team in all…

June 10, 2025