TikTok has denied a claim that it had been breached after a hacker on a popular hacking forum said they had obtained both user data and source code from the popular service.
A hacker going by the name of “AgainstTheWest” claimed to have breached TikTok on Breach Forums on Sept. 3 and claimed to have stolen data from the Chinese instant messaging app WeChat as well. The hacker shared screenshots of alleged databases belonging to the companies and claimed they contained 2.05 billion records over 790 GB.
AgainstTheWest claimed to have obtained the data from an Alibaba Group Holding Ltd. cloud instance. Given how often data breaches occur with exposed Amazon Web Services Inc. cloud instances, the claim is believable, but doubts followed shortly after that.
In response to the claimed data breach, TikTok said that the claim is false and that the source code shared by th hacker isn’t part of their platform. “This is an incorrect claim — our security team investigated this statement and determined that the code in question is completely unrelated to TikTok’s backend source code, which has never been merged with WeChat data,” a spokesperson for TikTok told Bleeping Computer.
However, some of the user data in the alleged data breach has been found to be legitimate. Troy Hunt from HaveIBeenPwnd tested the data and found some matches.
This is so far pretty inconclusive; some data matches production info, albeit publicly accessible info. Some data is junk, but it could be...
Read Full Story:
https://siliconangle.com/2022/09/05/tiktok-denies-breach-hacker-claims-user-d...