Alibaba Group

Alibaba Group operates an online ecommerce platform that enables merchants and consumers to conduct transactions across various product categories. In addition to its marketplace, the company provides cloud computing services that offer infrastructure, storage, and computing resources to business customers. The firm’s headquarters is located in China.

In October 2015, attackers exploited a vulnerability in Alibaba's cloud computing service to launch credential‑stuffing attempts against more than twenty million active accounts on its ecommerce platform. The attackers used a separate database containing approximately ninety‑nine million usernames and passwords that had been obtained elsewhere. Their actions included placing fake orders to manipulate seller rankings and offering the compromised accounts for sale to other malicious actors. Alibaba’s security team detected the intrusion in real time, blocked the majority of the login attempts, and worked with law‑enforcement authorities, which led to the apprehension of the perpetrators. The company also advised affected users to reset their passwords as a precautionary measure.

Although the incident caused a temporary decline in the corporation's stock value, Alibaba confirmed that its internal systems were not breached. The company’s response included detecting the intrusion during the attack, blocking most login attempts, collaborating with law‑enforcement authorities, and advising users to reset passwords. These actions illustrate a focus on security responsiveness within its cloud and ecommerce operations.