oBike Users’ Email Addresses And Phone Numbers Leaked Online In Database Hack

oBike’s Database Compromised, Unknowingly Leaks Users’ Data Worldwide

oBike users — your personal information might’ve been leaked online.

This comes after it was reported that bike-sharing service provider oBike had suffered a security breach which resulted in its users’ data being compromised.

If it makes you feel any better however, we weren’t just the only ones affected. Our counterparts in countries such as Germany, Malaysia, Switzerland and Great Britain had their details revealed as well.

Seems that oBike’s user’s information wasn’t lined up nicely.

Source

But before you start cancelling your subscriptions and asking for the refund, the issue has since been fixed and the system has been made more secure.

So it’s actually safe to keep riding the bikes – figuratively speaking of course, don’t forget to wear a helmet.

oBike’s global security breach

The leak was first discovered by Bavarian news agency BR24, when they realized they could access information oBike’s users’ information on the Internet. German broadcaster Bayerischer Rundfunk then reported that users’ data wasn’t encrypted and could be retrieved online.

Guess their security systems were in a mess.

Source

However, a spokesperson for the Singapore-based company quickly confirmed that they were aware of the issue since its discovery two weeks ago. He stated that they have since fixed it and improved the security of the system.

We have since fixed the loophole by disabling the API and created additional security layers.

He also assured that the leak wasn’t widespread and that information such as credit card details wasn’t compromised.

 

This only affected a small handful of our users. The personal data that was exposed was limited to user names, email addresses and mobile numbers. The app does not store credit card details or passwords of users.

Guess the worst that could happen is receiving a bunch of spam calls or emails — a mild inconvenience yes, but thankfully nothing major.

Reason for security breach

In addition to users’ data being neither encrypted nor protected, Bayerischer Rundfunk research found that the issue stemmed from the “problematic” social media features of the app.

If only their security measures weren’t all over the place.

Source

They stated that oBike’s feature of giving users the option to share invitation codes and social network travel also – unknowingly – allowed direct access to their own personal data. The company confirmed this by saying that the issue was a result of a “gap in our API (application programming interface) that allowed users to refer a friend to our platform”.

However, oBike has also stated that they’re in the process of reviewing their app.

We are relooking the sharing and security functions of the app, to ensure that no further user data is compromised.

Rightfully so.

Let’s hope their new system isn’t down in the drains.

Source

Additionally, the Personal Data Protection Commision (PDPC) in Singapore has confirmed that they were aware of the breach and have “reached out to oBike for more details.”

Harmless leak or serious oversight?

What do you think of this incident? Was it just a harmless leak or a serious oversight on the company’s security?

At the very least, oBike admitted up front about the issue and quickly rectified it. It’s not like they paid hackers $135,000 to cover up their data breach or anything — unlike a certain ride-hailing giant.

Let us know what you think.

Featured image from Twitter

Sean Chan Kit Whye

This has to be the most boring profile ever, I can't believe you are reading this. I could type random crap here and no one will really see it. Seriously, close this page and go out and do something. Actually I was kidding, come get your latest dosage of news here. You little curious reader, you.

Recent Posts

TOTO jackpot snowballs to S$10M for 14 Nov draw after 3 draws without Group 1 winner

The last time this happened was on 21 Oct.

13 Nov 2024, 12:54 am

S’pore funeral company director poses in hearse during birthday party, criticised for alleged disrespect

He later clarified that he had no intention of disrespecting his colleagues, the deceased, or…

12 Nov 2024, 6:42 pm

Resident hangs whole chicken outside Jalan Besar HDB, juice drips on neighbour’s clothes

The chicken was removed at the advice of the town council.

12 Nov 2024, 6:19 pm

Man in Japan dies after medics fail to transport him to hospital, mistaking him for dead

Police officers who took over the case were shocked to see the "dead" man moving.

12 Nov 2024, 6:18 pm

Family & friends bid farewell to 25-year-old S’porean student fatally stabbed in Brussels

"This is not the kind of fate someone like him deserves," said a former schoolmate.

12 Nov 2024, 5:47 pm