Tappware data breach: 94K accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2024-05-09
In April 2024, a substantial volume of data was taken from the Bangladeshi IT services provider Tappware and published to a popular hacking forum. Comprising of 95k unique email addresses, the data also included extensive labour information on local citizens including names, physical addresses, job titles, dates of birth, genders and scans of government issued national identity (NID) cards. Exposed data: dates of birth, email addresses, genders, government issued ids, job titles, names, phone numbers, physical addresses, religions. The breach dates from Apr 23, 2024; Have I Been Pwned loaded it on May 9, 2024.
What to do
- If you had a Tappware account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
