Singapore-based e-commerce firm Lazada said personal information including addresses and partial credit card numbers from 1.1 million accounts had been hacked.
The Alibaba-owned firm said that the information was taken from a database of its grocery arm RedMart that was more than 18 months out of date.
“The user information that was illegally accessed include names, phone numbers, email and mailing addresses, encrypted passwords and partial credit card numbers,” a spokesman for Lazada said.
Lazada said it had immediately moved to block access to the database and that its current customer data was not affected.