Marbridge Consulting reports:
In response to recent media reports that information belonging to 12 mln of its users has been leaked online, Chinese B2C e-commerce site Dangdang (NYSE: DANG) issued a statement today saying that only a small fraction of the account information now circulating online does in fact belong to Dangdang users. Dangdang added that the verified account information all predates June 2011 and was illegally removed from its servers in a hacking attack which it has reported to police.
On the same day as the Dangdang leak, information belonging to a large number of users of Chinese third-party payment processor Alipay was also leaked online, affecting approximately 15-25 mln accounts. Alipay responded to the incident in a statement on its microblog account, saying that only account IDs have been leaked and that users’ passwords and funds stored with Alipay are safe.
So what verified account information is actually circulating online? Can any Chinese-reading readers tell us what they’re seeing online? It seems that Dangdang is actually acknowledging a breach (although not of 12 million), while Alibaba’s online payment system, Alipay, is not acknowledging anything other than IDs.
These two reports are just the latest in a bunch of confirmed and rumored hacks in China. Two other rumored hacks involve 360buy.com and 178.com, but I have yet to see any confirmation of either of those.