Security News > 2022 > September > TikTok Denies Data Breach Reportedly Exposing Over 2 Billion Users' Information

The denial follows alleged reports of a hack that surfaced on the Breach Forums message board on September 3, with the threat actor noting that the server holds 2.05 billion records in a humongous 790GB database.

"Who would have thought that TikTok would decide to store all their internal backend source code on one Alibaba Cloud instance using a trashy password?," the hacking group known as BlueHornet tweeted over the weekend.

Bob Diachenko, threat intelligence researcher at Security Discovery, said the breach is "Real" and that the data is likely to have originated from "Hangzhou Julun Network Technology Co., Ltd rather than TikTok."

"We have confirmed that the data samples in question are all publicly accessible and are not due to any compromise of TikTok systems, networks, or databases," a TikTok spokesperson said.

"The samples also appear to contain data from one or more third-party sources not affiliated with TikTok. We do not believe users need to take any proactive actions, and we remain committed to the safety and security of our global community."

The Twitter account of AgainstTheWest has since been suspended and allegations of the break-in have since been modified on Breach Forums to mention that "The breach is not from TikTok, and that he most likely was lying or didn't even investigate it before making such outrageous claims."

News URL

https://thehackernews.com/2022/09/tiktok-denies-data-breach-reportedly.html