Vivamax has suffered a data breach, potentially compromising 6.8 million subscribers’ personal and transactional information, reported by a user named “BitBanish” who claims to have obtained it via API scraping that’s authenticated by admin privileges. This has been confirmed by Deep Web Konek (DWK), where the data file is over 2.08 GB and contains over 6.8 million JSON records, including full names, phone numbers, email addresses, subscription types (Google, Huawei, Card, Apple, Maya), and parental control PINs.
There’s also a separate file that is 1GB in size and contains multiple transaction rows per subscriber and information like subscription type, status, content ID, expiry time, and transaction ID.
Vivamax subscribers are at risk of identity theft and phishing attacks due to confidential files, and they are advised to update passwords, use multi-factor authentication, and avoid unsolicited emails and messages.
READ MORE:
Vivamax has released a statement on the data breach incident, and assured its subscribers that they are investigating it and that they did the necessary protocols to protect their users’ data.
Prior to this, other private companies like Maxicare and Acer have been affected by a data breach, while government agencies like DOST, PNP, and PhilHealth have been affected as well.
