2026 Temu — forum sale claim (unverified); 310M user records alleged
Data compromised
Seller-claimed account data: names, emails, phone numbers, bcrypt password hashes, device/app metadata, sign-up and login IP addresses, locales, and account timestamps; Cybernews reviewed 99 sample records with mostly 2026 timestamps but could not verify the 310M total—unverified
Technical writeup
Unverified forum sale claim — reported June 30, 2026. Cybernews documented a cybercrime-forum listing advertising approximately 310 million alleged Temu user records from the Chinese e-commerce marketplace (PDD Holdings). The seller published 99 sample records; Cybernews researchers confirmed the samples contain names, email addresses, phone numbers, user identifiers, bcrypt password hashes, Android/iOS device metadata, app package/version fields, sign-up and last-login IP addresses, locale settings, geographic fields, and account timestamps—mostly dated 2026, suggesting recent data rather than an obvious recycled breach compilation. Cybernews cautioned there is no way to verify the seller's claimed 310 million scope and noted the structure resembles an internal account-management system or a third-party service that handles Temu accounts rather than a direct storefront database dump. Temu told Cybernews its security team investigated and that the claims are "categorically false," stating the circulated data is not from Temu systems and citing MASA certification, HackerOne, 2FA, APWG membership, and PCI DSS compliance. This is distinct from Temu's February 2026 Nigeria NDPC regulatory probe (temu-nigeria2026) and from a separate 2024 BreachForums claim of 87 million records that Temu also denied. BreachHistory indexes the actor-cited 310M figure as unverified.
Root cause
Unverified cybercrime-forum listing advertising ~310 million alleged Temu user records—Temu denies the data originated from its systems at catalog time