Massive Data Leak of 310M Temu User Accounts Alleged on Dark Web

A threat actor has claimed to possess 310 million user records from Temu, a fast-fashion e-commerce platform, and is selling them on a dark web forum. The dataset reportedly includes full names, email addresses, phone numbers, bcrypt password hashes, and device metadata. Temu has 416 million monthly active users, making this potential breach significant. The seller provided 99 sample records, which were verified to contain recent account creation or login timestamps from 2026. Experts believe the data may have originated from an internal account management system or a third-party service. Despite the claims, Temu's spokesperson denied that the data came from their systems, asserting that their security measures are robust. This is not the first incident involving Temu; a similar breach was reported in 2024 involving 87 million records. The scale of the breach remains unverified, raising concerns about the accuracy of the seller's claims.

Key Points: • Over 310 million Temu user records are allegedly for sale on the dark web. • The data includes sensitive information such as names, emails, and password hashes. • Temu denies that the leaked data originated from their systems, citing strong security measures.