Event organizing service Peatix Inc. has suffered a data breach with the details of up to 6.77 million users offered for sale online.
The data breach, reported to have occurred earlier this month, included full names, usernames, emails and hashed passwords. According to ZDNet today, the user data was being advertised for sale via Instagram Stories, Telegram channels and on several different hacking forums.
The data was stolen via an unspecified “unauthorized access” that occurred between Oct. 16 and 17. The company, which has offices in both Japan and New York, disclosed the incident via a press release in Japanese Nov. 17. TechCrunch Japan reported that the data stolen primarily consisted of government event-related data, specifically from Kagoshima, Saitama, Utsunomiya City, Fukui City and Miyazaki City. It’s not clear whether any data from users outside of Japan was also stolen, but the company does have customers outside of Japan.