I have tried to contact the company but have been unsuccessful so far. Diachenko says that the data is likely to come from a company based out of Hangzhou City, in the Zhejiang Province, China. According to a Bleeping Computer report, a TikTok spokesperson told the publication that any leaked data couldn't have come from "direct scraping" of the platform as TikTok has "adequate security safeguards to prevent automated scripts from collecting user information."įurther confirmation of the third-party connection, however, comes by way of Bob Diachenko, a cyber threat intelligence analyst well-known for his work on database leaks and breaches, who has tweeted following an analysis of the alleged TikTok breach sample data. The data-scraping suggestion isn't as straightforward as it might be, though. It is certainly not unusual for such scraped databases to include data from a variety of sources, and that is also confirmed by the mention of third-party data in the statement. The updated TikTok statement confirms this to be the case. That is, publicly accessible data that has been collected, often by way of automated processes (bots), and compiled into a database for marketing or e-commerce use. There had already been some suggestion from data breach experts that the samples shared by 'AgainstTheWest' comprised scraped data. We do not believe users need to take any proactive actions, and we remain committed to the safety and security of our global community." The samples also appear to contain data from one or more third-party sources not affiliated with TikTok. We have confirmed that the data samples in question are all publicly accessible and are not due to any compromise of TikTok systems, networks, or databases. "Our security team has found no evidence of a security breach. A TikTok spokesperson has provided me with an updated statement that reads as follows: The suspicion that the TikTok data leak was actually a third-party database breach would seem to be all but confirmed now.
Third-Party data in leaked samples a clue to 'breach' origins However, it is far from clear at the moment whether third-parties have access to this type of data in the first place, let alone if one has actually been breached.
In a Hacker News forum thread, it has been suggested that the data looks like it came not from TikTok itself but rather from a third-party that integrates with TikTok for marketing or e-commerce purposes. Has TikTok been breached? Troy Hunt analyzed the data Twitter
0 kommentar(er)
