Tom.com

Tom.com, also known as TOM Online, is an internet company headquartered in China. The organisation provides online services to users within the Chinese market. Its core offerings include web-based platforms that support user accounts and digital interactions. While specific product details are not disclosed in the source material, the company is recognised as part of China’s broader internet ecosystem. The firm operates under the aliases Tom.com and TOM Online in public references and media reports.

On 1 October 2015, a hacker using the pseudonym DoubleFlag compromised Tom.com. The breach resulted in the theft of 8,258,839 user accounts from the company’s databases. The stolen data was subsequently offered for sale on the dark web alongside information from other Chinese internet firms such as NetEase, Tencent, Sina, and Sohu. This incident was labelled part of “The Big Asian Leak,” a larger collection of billions of credentials from various email providers and web portals. The dataset was advertised for approximately eight hundred United States dollars in Bitcoin, though no affected company publicly confirmed the breach. The event highlighted vulnerabilities in the security practices of multiple online services operating in Asia at that time. Despite the publicity, Tom.com has not issued an official acknowledgment of the specific compromise in publicly available sources.