It is certainly not unusual for such scraped databases to include data from a variety of sources, and that is also confirmed by the mention of third-party data in the statement. The updated TikTok statement confirms this to be the case. That is, publicly accessible data that has been collected, often by way of automated processes (bots), and compiled into a database for marketing or e-commerce use. There had already been some suggestion from data breach experts that the samples shared by 'AgainstTheWest' comprised scraped data. We do not believe users need to take any proactive actions, and we remain committed to the safety and security of our global community.' The samples also appear to contain data from one or more third-party sources not affiliated with TikTok. We have confirmed that the data samples in question are all publicly accessible and are not due to any compromise of TikTok systems, networks, or databases. 'Our security team has found no evidence of a security breach. A TikTok spokesperson has provided me with an updated statement that reads as follows:

The suspicion that the TikTok data leak was actually a third-party database breach would seem to be all but confirmed now. Third-Party data in leaked samples a clue to 'breach' origins However, it is far from clear at the moment whether third-parties have access to this type of data in the first place, let alone if one has actually been breached. In a Hacker News forum thread, it has been suggested that the data looks like it came not from TikTok itself but rather from a third-party that integrates with TikTok for marketing or e-commerce purposes. Has TikTok been breached? Troy Hunt analyzed the data Twitter

Wechat hackers