APKTW

In September 2022 the Taiwanese Android community forum known as APK.tw suffered a significant data breach affecting millions of registered members. The incident resulted in the unauthorized exposure of sensitive user credentials and technical identifiers. Investigating the breach revealed that the leaked database contained information such as account usernames, email addresses linked to the accounts, last known IP addresses, and salted MD5 password hashes. This exposure puts users at risk of credential stuffing and phishing attacks especially since the forum is a popular hub for mobile application sharing and technical discussions in the region. The scale of the leak indicates a major compromise of the forum backend systems or database infrastructure.