PChome 24h: Actor claims sale of 250,000…

MediumBreachNo software to update

In 30 seconds

Alleged

A threat actor reportedly claims to be selling about 250,000 customer profiles allegedly taken from PChome 24h. The report remains unverified, and the available evidence includes no confirmation from PChome.

What happened

Alleged

DailyDarkWeb published the claim on X, saying the purported dataset was being offered for sale. Its post attributes the material to an unidentified actor but provides no independently verified account of how the data was obtained.

Why it matters

Inferred

If genuine, the combination of identities, addresses and purchase details could make delivery or refund scams more convincing because a fraudster could refer to a real-looking order. This risk is analytical, not evidence that the reported dataset has already been used for fraud.

What to do

Inferred

PChome customers should treat unexpected delivery, payment or refund messages cautiously, avoid opening unsolicited links, and verify requests through PChome's official website or app. Extra suspicion is warranted when a message uses order details to create urgency.

Confirmed and still uncertain

Observed

What is known is limited to the existence and contents of DailyDarkWeb's post. The dataset's authenticity, its source, the actor's identity, the acquisition method, the number of distinct affected people and any connection to PChome's own systems remain unconfirmed in the supplied evidence.

What people are saying

Observed

DailyDarkWeb explicitly described the report as an unverified threat-actor claim rather than confirmation of a breach. It also said there was no official statement at the time of its post.

Evolution

Observed

The available account begins with an alleged sale of PChome customer records and immediately adds an important caveat: neither a breach nor the dataset's origin had been confirmed. No later verification or response appears in the supplied evidence.

Reach

Observed

1 independent groups, 1 updates, and 0 engagements.

Technical detail

Alleged

The alleged records include customer IDs, usernames, names, email addresses, full home addresses, order histories, products, brands, prices, quantities and order dates. Payment and shipping methods and statuses are also claimed, but the post does not say that payment card numbers or credentials are present.

Sources and evidence

Observed

The evidence set contains one X post from DailyDarkWeb and an attached image. It does not include a PChome statement, a notice to customers, forensic findings, a reproducible sample or independent corroboration, so the central sale and breach assertions remain allegations.