Tokopedia controversies
Controversies tied to this brand in public sources. A listing is not a finding of fault.
Back to profile5 entries
2020
Tokopedia user-data breach
In May 2020, reports said that personal information linked to Tokopedia users had been accessed and that a large database was offered for sale online. The reported data included identity and contact information and hashed passwords. Tokopedia stated that important payment information was not affected and that passwords remained encrypted, while it worked with Indonesian government bodies and independent cybersecurity experts.
2020
KKI sues Tokopedia over customer data breach
Lawsuit filed
The Indonesian Consumer Community (KKI) filed a lawsuit in the Central Jakarta District Court against Tokopedia and Indonesia's Ministry of Communication and Informatics over a data breach involving millions of customers. KKI's lawyer cited Tokopedia's negligence as the reason behind the leak; the article reports the allegation, not a court determination.
Source excerpt
KKI's lawyer, Akhmad Zaenuddin, in a written statement here on Wednesday, cited Tokopedia's negligence as the reason behind the leak.
The Indonesian Consumer Community (KKI) has filed a lawsuit in the Central Jakarta District Court against e-commerce platform Tokopedia and the Ministry of Communication and Informatics over data breach involving millions of customers.
2020
Tokopedia reports attempts to steal user data amid breach reports
Issue disclosure
Tokopedia stated that it had identified attempts to steal user data and that important user information, including passwords, remained protected. According to a report cited in coverage of the event, a hacker leaked 15 million Tokopedia user accounts following a March exploit. Tokopedia said it was investigating the matter. The company's statement focused on the protection of key user information and on its ongoing investigation, while the reported leak of accounts was attributed to the cited report.
Tokopedia said it found attempts to steal user data and that important user information, including passwords, remained protected. A report cited in the article said a hacker leaked 15 million Tokopedia user accounts following a March exploit; Tokopedia said it was investigating.
Company response
Investigation — Tokopedia
At present, we continue to investigate, and there is no further information we can convey
Source excerpt
We found attempts to steal data from Tokopedia users, but Tokopedia ensured that important user information, such as passwords, remain protected,
Hack occurred in March 2020 and affects 15,000,000 users though the hacker said there are many more.
Tokopedia is conducting an in-depth evaluation.
2020
Investigation into Tokopedia customer data leak
Investigation
In 2020, Tokopedia and the Indonesian government were investigating a data leak that compromised the personal data of millions of Tokopedia customers. According to reporting at the time, Tokopedia was working with government investigators on the matter. The event concerned the exposure of customer data records and the joint inquiry by the company and authorities; the available source summary does not specify further details of the leak or the investigation's results.
Company response
Investigation — Tokopedia
William Tanuwikaya, CEO at Tokopedia, had confirmed that the company was working with investigators which includes government agencies such as Indonesia’s Ministry of Communication and Information Technology and the National Cyber and Crypto Agency (BSSN).
Source excerpt
Tokopedia and the Indonesian government are in the process of investigating a data leak that compromised the personal data of millions of the company’s customers.
The hacking group, which goes by the name Whysodank, reportedly sold the customer data for $5,000 through a dark web marketplace.
The leaked data reportedly includes the names, birth dates, gender, email addresses, and phone numbers of Tokopedia users.
2018
Counterfeit and pirated product listings
The United States Trade Representative identified Tokopedia as a notorious market because of concerns about counterfeit and pirated goods allegedly offered through the platform. The issue reflects the enforcement and content-moderation challenges faced by large third-party marketplaces.