A database allegedly containing information on 2.6 million users is being sold for $1,000. Carousell Corp. – said 1.95 million user accounts were affected.
Affected users were told that their data had been compromised during the system transfer, an available bug that was used by a third party to gain unauthorized access. The error has been fixed, a spokesman said.
The cybercriminals downloaded a database of 2 GB of data as Carousell confirmed the hack.
It contains confidential data of users of the service.
The hackers said only five copies of the database would be sold.