Pandabuy pandabuy.com Pandabuy data breach: what happened and what to do
In March 2024 data from the shopping agent Pandabuy was posted online. Have I Been Pwned lists 1,348,407 accounts, with email addresses, IP addresses, names, phone numbers and physical addresses exposed.
View all 13,115 breaches- Breach date
- 31 Mar 2024
- Affected
- 1,348,407
- Data exposed
- Email addresses, IP addresses, Names, Phone numbers, Physical addresses
- Verified
- Yes
- Last updated
Source: Have I Been Pwned (CC BY 4.0)
Pandabuy is an online service for buying goods from China. Its customer data was leaked on 31 March 2024 and added to Have I Been Pwned (HIBP) the next day.
What happened
HIBP reports that 1.3 million unique email addresses were posted to a hacking forum, with order enquiries alongside them. The Register reported that Pandabuy acknowledged the breach. BleepingComputer later reported that the company said it had paid a ransom to stop the data leaking, only to be extorted again by the same actor. Poland's data protection authority referred the leak of Polish customers' data to prosecutors in April 2024.
What was exposed
HIBP lists 1,348,407 accounts with email addresses, IP addresses, names, phone numbers and physical addresses. Other outlets report larger datasets and more fields, so check the sources below for their wording.
Your name, phone number and delivery address together make order and parcel scams easy to run: a message about a stuck shipment or a customs fee that quotes your real address is hard to dismiss. IP addresses give a rough location.
What to do
Change your Pandabuy password and any reused one. Treat shipping, customs and refund messages with suspicion, and check order status inside the app or site yourself.
What to do if you were in it
- 1
Change your password and any reuse of it
Change it on the affected service and on every other account that uses the same or a similar password. A password manager makes unique passwords easy. Turn on two-factor login where it's offered.
- 2
Watch for package and delivery scams
A leaked name, phone number and home address make convincing fake delivery and order messages. Check order status in the retailer's own app or site, not through a link in a message.
- 3
Expect phishing that mentions the breach
Treat unexpected emails, texts and calls as suspect, especially ones that name the company or offer help with the breach. Don't click links in them; go to the company's site yourself.
- 4
Check which other breaches include you
Run a free Serus scan to see whether your email or phone number appears in this and other breaches. Serus monitors breach databases and the dark web and alerts you when your details show up in a new leak.
Frequently asked
Was I affected by the Pandabuy breach?
Look up your email on Have I Been Pwned, or run a free Serus scan. HIBP lists 1,348,407 accounts.
What was exposed?
Email addresses, IP addresses, names, phone numbers and physical addresses, according to HIBP.
Did Pandabuy confirm the breach?
Yes. The Register reported that Pandabuy admitted to the breach, and BleepingComputer reported the company said it had paid a ransom demand earlier.
Should I change my password?
Yes, on Pandabuy and anywhere you reused it, and turn on two-factor login.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
