How the Pandabuy Database Exposed Over 1M User Profiles

HEROIC found the Pandabuy Database breach dated March 2024, exposing 1,034,561 records including email addresses, IP addresses, and phone numbers from Pandabuy, a Chinese e-commerce platform facilitating international purchases from China, reportedly breached by known threat actors Sanggiero and IntelBroker.

Why the Pandabuy Breach Is Dangerous

Known threat actors Sanggiero and IntelBroker orchestrated this breach, and IntelBroker has a documented history of selling stolen data on criminal marketplaces. The leaked dataset includes not only contact details but also order inquiries, revealing purchasing habits and personal interests of over a million customers. This combination of personal data and transactional information enables highly targeted phishing, social engineering, and identity fraud against affected users worldwide.

What Was Exposed in the Pandabuy Leak

• Email addresses
• IP addresses
• Phone numbers

Why This Pandabuy Data Puts You at Risk

Even without passwords, this data is dangerous. Your email address, phone number, and IP address give criminals everything they need to craft spear-phishing attacks tailored to your purchase history. Phone numbers enable SIM swap attacks that bypass multi-factor authentication. The involvement of prolific threat actors like IntelBroker means this data is actively being traded and weaponized on criminal forums, putting Pandabuy users at ongoing risk of identity theft and financial fraud.

How Database Breaches Work

Database breaches occur when attackers exploit vulnerabilities such as SQL injection or misconfigured servers to extract user records directly from a site's backend database. Once inside, they can download millions of records in minutes. The stolen data is then packaged and sold or shared across criminal forums and dark web marketplaces.

Check If Your Data Was Exposed

HEROIC operates one of the world's largest breach databases, covering more than 400 billion leaked records. Use HEROIC's free breach scanner to check if your email address or credentials appeared in the Pandabuy leak or thousands of other breaches in our database.