22000 Tanam Pohon Records Exposed: Indonesian eCommerce Breach

We noticed an unusual spike in credential stuffing attempts targeting our user base shortly after the public disclosure of a breach affecting Tanam Pohon. What struck us was the immediate correlation between the compromised data and the specific fields we observed being exploited in our logs. The timing and the nature of the attack vectors strongly suggest a direct repurposing of the leaked Tanam Pohon credentials against our infrastrukture. This incident highlights a persistent challenge in managing user credentials across disparate platforms and the cascading risks associated with even seemingly unrelated data exposures.

The Tanam Pohon breach, discovered on October 29, 2024, exposed approximately 22,000 records, with 12,848 unique email addresses identified. The compromised data set included a comprehensive suite of personally identifiable information (PII) such as first names, last names, phone numbers, birthdays, and usernames. Crucially, the breach also contained bcrypt password hashes, a strong indicator that attackers would likely attempt to crack these for plaintext credentials. The data was subsequently disseminated via a Telegram channel, a common distribution point for stolen data, increasing its accesibility to malicious actors. The source of the compromise appears to have been a direct database exfiltration, indicating a significant security lapse within Tanam Pohon's data storage mechanisms.

While specific news coverage for the Tanam Pohon breach itself might be limited to regional Indonesian outlets, the broader trend of data leaks from e-commerce and platform services continues to be a significant concern. OSINT analysis of Telegram channels reveals a consistent pattern of such databases being posted, often within days of discovery. Researchers at cybersecurity firms have repeatedly documented the lifecycle of these breaches, from initial compromise to the monetization of stolen data through dark web marketplaces and direct sale channels. The presence of bcrypt hashes, while a more robust hashing algorithm than MD5 or SHA-1, still poses a risk, as evidenced by ongoing research into efficent cracking techniques for such hashes, particularly when combined with common password patterns.