PandaBuy, a prominent Chinese global shopping platform, recently fell victim to a cyberattack, resulting in the theft of sensitive data belonging to more than 1.3 million users. The breach was announced by a hacker on a dark web forum, who detailed the exploitation of critical vulnerabilities in the platform's API. While the hackers claimed to have accessed data on over three million users, the actual number of compromised accounts was confirmed to be 1,348,407. The database is reported to include various personal details such as user IDs, names, phone numbers, emails, and more. Security expert Troy Hunt initiated a mass password reset for the affected email addresses and revealed that at least 1.3 million addresses were associated with PandaBuy. It is advisable for users to visit HaveIBeenPwned? to check if their data was compromised and reset their passwords if necessary. Despite the breach, PandaBuy has not officially addressed the issue, leading to speculations about the company's handling of the incident. The platform representatives claimed it was an older incident that had been resolved, while others accused them of attempting to cover it up. Additionally, the breached database is allegedly up for sale for a nominal fee in cryptocurrency. This cyberattack serves as a reminder of the prevalent threats in e-commerce and the importance of robust security measures to protect user data.