MANILA, Philippines — Information of 3.3 million users of online lending application Cashalo are being sold over two sites on the dark web, the National Privacy Commission (NPC) said Tuesday.
According to NPC, its investigation on the Cashalo data breach revealed that usernames, passwords, e-mail addresses, phone numbers, and device identifications of users were being sold by a person using the username “crepxploit.”
NPC thinks creepxploit successfully downloaded files from Cashalo’s own database, which may indicate a violation of the app’s privacy measures, and then dumped the data on the dark web where it was sold starting February 14.
“A certain user named ‘creepxploit’ sel…
Keep on reading: Data of 3.3 million Cashalo users sold on dark web, says privacy body