(Reuters) – Singapore e-commerce firm Lazada said on Friday that personal information including addresses and partial credit card numbers from 1.1 million accounts had been hacked, a major breach in the city-state of 5.7 million.
The Alibaba-owned firm said in an email that the information was taken from a database of its grocery arm RedMart that was more than 18 months out of date.
“The user information that was illegally accessed include names, phone numbers, email and mailing addresses, encrypted passwords and partial credit card numbers,” a spokesman for Lazada said.
The firm said it had immediately moved to block access to the database and that its current customer data was not affected.
Reporting by John Geddie and Chen Lin; Editing by Jonathan Oatis and Jan Harvey