2022 Carousell — 44K guest users, chat function error
Data compromised
Emails, names, phone numbers (Philippines)
Technical writeup
Human error during chat updates for Philippines market. Email and names of guest users auto-appended to messages across all markets. Philippine guests also had phone numbers exposed. Singapore, Malaysia, Indonesia, Taiwan, Philippines. Part of S$58K PDPC fine.
Root cause
Human error; chat function misconfiguration