Top arcade game maker leaks nearly 19 million user records via WeChat mini app

https://cdn.mos.cms.futurecdn.net/BUi4eir3JnCCT2MRGt3weS-2560-80.jpg
  • Wahlap left an open Elasticsearch instance exposing 18.9 million records tied to its WeChat mini‑program ecosystem
  • Data included 6.6 million unique Union IDs, 1.7 million phone numbers, and personal details that could enable targeted phishing and fraud
  • The archive was locked down after disclosure, though there’s no evidence the exposed information was exfiltrated

Chinese arcade-maker powerhouse Wahlap, reportedly kept a huge user database open on the internet, available to anyone who knew where to look, security researchers from Cybernews have warned, putting personal information at risk.

Wahlap is one of the largest arcade makers in the world, working with some of the biggest names in the gaming industry, such as Sega, or Timezone. It offers Wahlap WeChat mini programs, lightweight applications that run inside the WeChat ecosystem.

For those unfamiliar with WeChat, it is one of the most popular mobile apps in the Chinese market. It is primarily a chat...

Copyright of this story solely belongs to techradar.com. To see the full text click HERE