Bukalapak

Bukalapak is an Indonesian e-commerce company that operates an online marketplace connecting buyers and sellers across the archipelago. The platform allows users to browse, purchase, and sell a wide variety of consumer goods, ranging from electronics and fashion to household items and groceries. It provides merchants with storefronts, payment processing, and logistics support to facilitate transactions. Bukalapak serves both individual consumers and small to medium-sized enterprises seeking to reach a broader digital market. The company’s core offering centers on creating a trusted environment for online trade within Indonesia.

Headquartered in Indonesia, Bukalapak gained public attention in February 2018 when a data breach exposed approximately 13 million user records, including usernames, email addresses, encrypted passwords, names, dates of birth, IP addresses, geographic locations, and website activity. The leaked data appeared for sale on a dark web forum, with claims that a subset of email‑password pairs had been cracked. Bukalapak responded by denying a new breach, attributing the incident to an earlier attempted intrusion and asserting that no essential data such as passwords or financial information had been stolen. Despite the company’s insistence that its systems remained secure, the exposed dataset contradicted those statements by containing extensive personal details. This episode highlighted the challenges Bukalapak faces in safeguarding user information while operating a large‑scale online marketplace.