Threat Intelligence Brief
Curated summary with source attribution
Source: gbcode.rthk.hk
Threat Risk: Medium
Victim: Neigbuy (E-commerce platform)
Incident: Unauthorized access to a user database containing personal and order information.
Impact: Exposure of PII for over 33,000 users and financial losses due to subsequent phishing scams.
Attacker: Unidentified threat actors
Analysis: The breach involved unauthorized access to PII and order histories, which threat actors are now leveraging for social engineering. By posing as customer service, attackers have already successfully defrauded users of significant funds. This sequence demonstrates the high risk of secondary fraud following a data leak.
Recommendations: Enable multi-factor authentication (MFA) across all accounts; Be wary of unsolicited customer support calls or emails requesting payments; Update passwords for any accounts sharing the same credentials as Neigbuy
Source: RTHK
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source