Peatix

Peatix is an event management platform headquartered in Japan, providing services for event creation, ticketing, and participant management. The platform primarily serves Asian markets, as evidenced by the predominantly Asian names among the over 4.2 million users affected by a 2020 data breach. That incident involved the leak of full names, usernames, emails, and salted hashed passwords, while financial information remained secure due to third-party payment processing. Peatix handles various user data but outsources payment transactions.

The organization employs salted hashing for password security and isolates payment data through external processors, measures that limited the breach's scope. Following unauthorized access, Peatix confirmed the incident, blocked further intrusions, and initiated password resets for compromised accounts. Historical event participation data, questionnaire responses, addresses, and phone numbers were reportedly unaffected, indicating data segmentation. Stolen records were disseminated via Instagram stories, Telegram channels, and hacking forums. The leaker claimed the breach was originally intended to sabotage a rival broker, not Peatix. The breach response demonstrated the company's incident containment procedures, though the exposure of salted hashes underscored potential cryptographic vulnerabilities.