Seller Claims Shopee Customer Database of 300 Million Records Is for Sale

Summary
A seller using the name 666op allegedly offered a Shopee customer database, claiming more than 300 million records across Southeast Asia, Taiwan, and parts of Latin America. The listing and data claims are unverified.
Key points
- A seller identified as 666op allegedly advertised a Shopee customer database.
- The listing claims more than 300 million unique records dated to March 2026.
- Claimed coverage includes Indonesia, Taiwan, Thailand, Singapore, and parts of Latin America.
- Advertised data includes names, emails, phone numbers, addresses, order history, spending, and device identifiers.
- The claim is unverified; the article says the advertised data could enable targeted phishing and fraud.
Article Details
- Victim Organization
- Shopee
- Incident Type
- Unverified claim that a customer database was offered for sale
- Data Types Exposed
- Names
- Email addresses
- Phone numbers
- Addresses
- Order history
- Spending information
- Device identifiers
- Affected Records
- More than 300 million unique records claimed; the listing is unverified.
- Operational Impact
- The listing's advertised data could enable targeted phishing and account abuse; no resulting impact is confirmed.
- Ransom Or Extortion
- A seller allegedly offered the database for sale. No ransom or extortion is reported.
- Claim Status
- claimed
Threat Actors
Countries
IndonesiaReportedly affected regions include Indonesia, Taiwan, Thailand, Singapore, and parts of Latin America.SingaporeReportedly affected regions include Indonesia, Taiwan, Thailand, Singapore, and parts of Latin America.TaiwanA seller using the name 666op is allegedly offering a Shopee customer database with more than 300 million records, claiming coverage across Southeast Asia, Taiwan, and parts of Latin America.ThailandReportedly affected regions include Indonesia, Taiwan, Thailand, Singapore, and parts of Latin America.
