A data breach has hit Vivamax Philippines according to recent reports. Information about its 6.8 million subscribers may have been compromised by the breach.
The breach was announced by a user going with the alias “BitBanish” and was offered for sale through a forum. He claims that he obtained the information via API scraping, authenticated by admin privileges. The data available on the leak includes personal and transactional information of subscribers.
The data file is more than 2.08 in size and contains more than 6.8 million records in JSON format. The leak may include full names, phone numbers, email addresses, country of registration, account creation dates, subscription IDs, subscription start and end times, subscription type, and parental control PINs.
Additionally, a separate transaction data file which is sized at around 1.0GB in size contains multiple transaction rows per subscriber as well as information such as subscription type, status, content ID, expiry time, and transaction ID.
The information contained within these files exposes Vivamax’s subscribers to risks such as identity theft, phishing attacks, and other cybercrimes.
Vivamax has yet to release an official response to this breach.
If you are a subscriber of Vivamax Philippines, it is recommended to take extra steps to protect yourself. Steps include updating passwords, implementing multi-factor authentication, and avoiding unsolicited emails and messages.
