Data Leak at Shopping Platform PandaBuy Impacts 1.3 Million Users

"The data was stolen by exploiting several critical vulnerabilities in the platform's API and other bugs were identified allowing access to the internal service of the website," the threat actor named 'Sanggiero' said.