Incident Types: The types of cybersecurity incidents that have occurred include Breach and Data Leak.

Detection and Response: The company detects and responds to cybersecurity incidents through an remediation measures with fixed the security breach, and communication strategy with customers were cautioned by lazada to watch out for phishing emails...

Common Attack Types: The most common types of attacks the company has faced is Data Leak.

Identification of Attack Vectors: The company identifies the attack vectors used in incidents through Barcode scanners.

Commonly Compromised Data Types: The types of data most commonly compromised in incidents are User Names, Phone Numbers, Parcel Tracking Numbers, , User Names, Phone Numbers, Parcel Tracking Numbers, , Personal Information, Payment Information, and User data.

Prevention of Data Exfiltration: The company takes the following measures to prevent data exfiltration: Fixed the security breach.

Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Media reports and intelligence sources.

Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through Customers were cautioned by Lazada to watch out for phishing emails..

Advisories Provided: The company provides the following advisories to stakeholders and customers following an incident: was Customers were cautioned by Lazada to watch out for phishing emails..

Corrective Actions Taken: The company has taken the following corrective actions based on post-incident analysis: Fixed the security breach.

Last Attacking Group: The attacking group in the last incident were an 21 suspects arrested by Chinese police and Chinese government or Chinese Communist Party-linked entities.

Most Significant Data Compromised: The most significant data compromised in an incident were User names, Phone numbers, Parcel tracking numbers, , User names, phone numbers, parcel tracking numbers, 56GB of data across 22 indices, names, phone numbers, e-mail addresses, mailing addresses, encrypted passwords, a portion of credit card numbers, and User data from India.

Most Significant System Affected: The most significant system affected in an incident was Barcode scanners and .

Most Sensitive Data Compromised: The most sensitive data compromised in a breach were User names, phone numbers, parcel tracking numbers, encrypted passwords, a portion of credit card numbers, e-mail addresses, mailing addresses, Parcel tracking numbers, 56GB of data across 22 indices, names, phone numbers, User names, User data from India and Phone numbers.

Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 20.0M.

Most Recent Source: The most recent source of information about an incident is Media reports and intelligence sources.

Current Status of Most Recent Investigation: The current status of the most recent investigation is Resolved.

Most Recent Customer Advisory: The most recent customer advisory issued was an Customers were cautioned by Lazada to watch out for phishing emails.

Most Recent Entry Point: The most recent entry point used by an initial access broker was an Barcode scanners.

Most Significant Root Cause: The most significant root cause identified in post-incident analysis was Infected Barcode Scanners, Malware infection in barcode scanners.

Most Significant Corrective Action: The most significant corrective action taken based on post-incident analysis was Fixed the security breach.