Pandabuy confirms crooks nabbed data on 1.3M punters

Pandabuy disclosed a data breach after cybercriminals advertised a dataset (reported as nearly 3 million rows, with 1.3 million unique emails verified) containing user IDs, full names, phone numbers, email addresses, IP addresses, home addresses and order data. Security researchers confirmed the data's authenticity, Pandabuy stated no financial data was impacted and said vulnerabilities were fixed, and the company faced negative community reaction to its response.