ePrice Taiwan Data Breach
The January 2021 ePrice Taiwan data breach occurred when unauthorized threat actors exfiltrated the production user and customer database of ePrice 比價王 (eprice.com.tw), Taiwan's foremost consumer electronics shopping, tech review, and price comparison platform.
Exposed Data Types
9- Email addresses
- Passwords
- Names
- Usernames
- Phone numbers
- Dates of birth
- Genders
- Physical addresses
- IP addresses
About This Breach
The compromised database was subsequently circulated across dark web and breach intelligence communities.
What information was affected in the ePrice Taiwan incident?
The leaked relational database export (epeice.csv) contains rich demographic and authentication records. The incident compromised records belonging to 464,459 unique verified users, exposing:
- Authentication Credentials: Plaintext passwords alongside bcrypt-hashed password strings.
- Contact Details: Verified canonical email addresses and mobile telephone numbers.
- Personal Demographic Information: Real names, usernames, display nicknames, birth dates, and genders.
- Physical Geographic Data: Residential street addresses, districts, cities, and postal codes across Taiwan.
- Network & Account Metadata: User IP addresses, security question answers, and account registration timestamps.
How many accounts were affected?
Rigorous RFC canonical validation and deduplication confirmed 464,459 unique valid email addresses across more than 520,000 raw database entries.
Technical analysis and security risks
The exposure of plaintext passwords represents an extreme security risk, granting threat actors immediate capability for automated credential stuffing and account takeovers. When combined with real names, mobile numbers, and physical residential addresses, affected consumers face heightened vulnerability to targeted spear-phishing, SIM swap attacks, and identity fraud.
Recommended actions for affected users
Registered users of ePrice should:
- Immediately update passwords across all accounts where the ePrice password was shared or reused.
- Employ a reputable password manager to enforce complex, non-reused passwords.
- Activate multi-factor authentication (MFA / 2FA) across all digital banking, telecom, and email services.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
