A recent poster on a hacker forum claims to have obtained TikTok’s and WeChat’s databases on Alibaba‘s cloud service platform, which together contain over 2.05 billion user records. Tiktok denied any data breach. Tencent spokesperson also told Pandaily the company has found no evidence of a security breach.
The hacker group, calling itself “AgainstTheWest”, also posted a sample of part of its database on Twitter and mocked TikTok for storing not only user data but also its own back-end source code on Alibaba Cloud while using an easily cracked spam password.
The sample released by the hackers included information about TikTok users in a large number of Southeast Asian and European countries in addition to a small number of WeChat users in China. The Twitter account that released the data indicated a willingness to hand over the newly obtained database to the U.S. security department.
“We have confirmed that the data samples in question are all publicly accessible and are not due to any compromise of TikTok systems, networks, or databases,” TikTok spokesperson Maureen Shanahan said in a statement to The Verge. “We do not believe users need to take any proactive actions, and we remain committed to the safety and security of our global community.”