Yiyou.com was hacked and "more than 690,000 people's data was leaked". Operator: Excludes credit card numbers and ID numbers.

The travel platform Yiyou.com issued an announcement today (9th) stating that on the 7th of this month, it detected an abnormal external cyber attack on its member center. Immediately after discovering the abnormality, it immediately activated the information security defense and response mechanism. After a preliminary inspection, some historical order contact information was improperly obtained, and the data involved It may include names, emails, contact numbers, product ordering information, etc. It does not involve credit card numbers, security codes, ID card numbers and other information. More than 690,000 people are affected. Affected consumers have been proactively notified, and the notification text messages and emails do not include any URL links.

Yiyou.com stated that on November 7, it proactively detected an abnormal external network attack on its member center. After discovering the anomaly, it immediately activated the information security defense and response mechanism, completed abnormal traffic interception and blocking, and simultaneously commissioned an external third-party information security professional team to assist in investigation and digital forensics. After preliminary inspection, some historical order contact information was improperly obtained. The involved information may include names, emails, contact numbers, product order information, etc. After system comparison and removal of duplicate information, more than 690,000 people were affected.

Yiyou.com pointed out that it has taken the initiative to report to the competent authorities and police units within the legal time limit in accordance with the relevant laws on personal data protection, and will fully cooperate with judicial investigations to thoroughly trace the source of illegal cyber attacks.

Yiyou.com continued to point out that the website's order information and cash flow transaction system are strictly separated and managed. It has been confirmed that this incident does not involve credit card numbers, security codes and account login passwords, nor does it include consumer passport numbers and ID card numbers. It does not affect the security of any transaction flow. It has proactively notified affected consumers through text messages and emails to remind them of relevant risks and fraud prevention precautions.

Yiyou.com stated that because fraud groups may use order information to impersonate customer service or bank personnel to induce consumers to provide credit card information, SMS verification codes, request to operate ATMs and click on unknown links for reasons such as "order anomalies" and "repeated deductions", please do not follow instructions from unknown calls or messages. Provide personal financial information or conduct transaction operations, and emphasize that the text messages and emails notifying this information security incident do not include any URL links. Consumers are urged to be more vigilant and do not click on unknown links or provide personal financial information or conduct transaction operations according to instructions from unknown calls and messages.

In response to this information security incident, Yiyou.com has immediately activated the response mechanism and completed the blocking of abnormal traffic. In the future, it will further comprehensively review consumer data access rights, system security protection and abnormal traffic monitoring mechanisms, improve the overall information security defense capabilities, and adopt more rigorous information security management measures to protect consumer data security and consumer rights. We solemnly extend our deepest apology.