2016 Taobao (Alibaba) — 20M users

2016 20.0M records affected

Data compromised

Usernames, passwords, account data

Technical writeup

Taobao, Alibaba's e-commerce platform, was affected by a breach in 2016 where approximately 20 million user records were compromised. The data was used in credential stuffing attacks. The breach was linked to a larger Chinese data breach involving 100 million records.

Root cause

Unauthorized access; credential stuffing source

References

https://nakedsecurity.sophos.com/2016/02/05/data-breach-in-china-100-million-records-used-to-hack-20-million-taobao-users