- A hacker is offering a database that reportedly contains personal information of 310 million Temu users.
- The sample data reviewed by researchers appears recent and includes 2026 account activity, raising questions about where the information originated.
- Temu has denied the allegation and currently, there’s no proof that the database is authentic.
A database supposedly holding a record of over 310 million Temu customers is currently up for sale on a dark web forum. The Chinese ecommerce company has denied any form of security incident that may have exposed customer data.
But if the hacker’s claims turn out to be true, this incident will become one of the biggest data breaches involving an online shopping platform.
Details of Alleged Data Breach
According to the threat actor’s post, the database contains sensitive Temu user information. That includes customers’ full names, emails, phone numbers, password hashes, information about devices, even accounts metadata. In addition, they posted 99 data samples to back their claims.
Security analysts examined the samples and noticed something concerning. Nearly all the records contained timestamps showing account activity from 2026. This suggests the information is recent rather than old data recycled from previous leaks. The data looks like it could have come from an internal account management system or a third-party service that Temu uses.
However, samples alone can’t prove that the attacker actually has the entire 310 million records he is claiming. Cyber attackers always tend to mix the legitimate information with the fake one.
This seller charges just $700 for the whole database. Such a cost for such an amount of data appears to be quite affordable; however, it does not seem to be authentic. Cybercriminals usually exploit famous brands and exaggerate the amounts to make potential clients interested in buying.
Temu Denies Any Breach of Its Systems
Temu has strongly denied the breach allegations. A company spokesperson said their security team conducted a full investigation. Based on their findings, the circulating data is not from Temu’s systems.
The company pointed to several security measures it has in place to protect customer data. These include certification under the Mobile Application Security Assessment (MASA) standard and a bug bounty program through HackerOne. The platform also offers optional two-factor authentication. They also have a membership in the Anti-Phishing Working Group and follow PCI DSS payment security standards.
Why this Matters Even Without Confirmation
There is no independent evidence to confirm the validity of the huge database. Nevertheless, it is recommended to take the provided information as a wake-up call for cybersecurity specialists.
It appears that the hacker used bcrypt hashing in order to protect the passwords, which is considered to be a safe way of encryption. At the same time, weak or commonly used passwords may be easily compromised by performing an offline attack. In case the attack is successful, it will become possible for hackers to use the obtained logins and passwords on other websites.
The obtained information is very dangerous even if the passwords have not been cracked yet. Names, emails, telephone numbers, and location data enable hackers to perform phishing attacks on people in a convincing manner.
The scale of such risks is staggering. A hacker known as ‘ChinaDan’ has claimed the sale of a database with records of over one billion Chinese citizens, highlighting the massive potential for exploitation.
A Pattern of Allegations
This is not the first time hackers have claimed to possess Temu customer data. In 2024, another threat actor advertised a database of 87 million Temu records. Temu also denied those claims at the time, saying its investigation found no matches to their systems.
The company has faced regulatory attention for other privacy issues. Earlier this year, Nigeria’s data protection regulator launched an investigation into Temu’s handling of user information. European regulators have also taken enforcement action over separate consumer protection concerns.
What Temu Users Should Do Now
For now, we have no evidence that the alleged 310 million records exist or are actually from Temu. However, everyone concerned should remain cautious. If you’re a Temu user, consider changing your passwords. Two-factor authentication can also be helpful. Be aware of any unusual notifications from Temu.
Avoid clicking links from random emails or texts from senders you don’t know or those claiming to be Temu representatives. Instead, access your account directly through the Temu website or app.
