Wednesday, May 14, 2025
HomeCyber Security NewsHackers Claim TikTok Breach, Leak Over 900,000 Usernames and Passwords

Hackers Claim TikTok Breach, Leak Over 900,000 Usernames and Passwords

Published on

SIEM as a Service

Follow Us on Google News

A hacker collective known as R00TK1T claims to have breached TikTok’s user database, allegedly leaking login information for over 900,000 users.

The group, which has previously made waves in the hacking community with bold claims—often with little substantiated evidence—has taken to underground forums to boast about their latest exploit.

Alleged Account Deletions and Data Leak

According to a series of posts, R00TK1T asserts they did more than just access usernames and passwords.

- Advertisement - Google News
 access usernames and passwords.
access usernames and passwords.

The group claims to have actively targeted individual users, deleting their TikTok accounts outright.

Screenshots, purportedly showing deleted account confirmations and database snippets, were shared alongside download links to what R00TK1T alleges is a dataset containing over 900,000 TikTok credentials.

“We have penetrated TikTok. 900k+ users compromised. Accounts are being deleted at will,” wrote a spokesperson for R00TK1T in a statement on a popular dark web forum.

When reached for comment, TikTok stated, “We take all security allegations seriously and are actively investigating these claims.

At this time, we have not found evidence of a breach affecting user accounts on the scale described.”

TikTok further recommended that all users employ strong, unique passwords and enable two-factor authentication. The company also urged users not to download leaked files or enter their credentials on untrusted websites.

Cybersecurity analysts have urged caution regarding R00TK1T’s claims. Known for inflating their previous exploits, the group’s credibility remains questionable.

“R00TK1T regularly exaggerates impact for attention,” says cyber threat researcher Elena Zhou. “We’ll need independent verification and technical analyses before confirming any widespread breach.”

Early reviews of the leaked dataset suggest that at least some of the information could be recycled from older breaches or fabricated.

Security professionals are currently working to verify the authenticity and scope of the alleged stolen data.

Until more information emerges, experts urge TikTok users to:

  • Change their account passwords immediately
  • Avoid clicking on suspicious links or downloading leaked data
  • Enable two-factor authentication for added security

For now, the hacking claims by R00TK1T remain unsubstantiated. While the possibility of a massive TikTok breach is alarming, the cybersecurity community is still evaluating the evidence.

Users are advised to stay vigilant, practice good password hygiene, and watch for official updates from TikTok as the investigation continues.

Find this News Interesting! Follow us on Google NewsLinkedIn, & X to Get Instant Updates!

Divya
Divya
Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Latest articles

Microsoft Patch Tuesday May 2025 Released With the Fixes for 72 Flaws With 5 Actively Exploited 0-Day

Microsoft has released its May 2025 Patch Tuesday updates, addressing 72 security vulnerabilities across...

Ivanti Released Security Updates to Fix for the Mutiple RCE Vulnerabilities – Patch Now

Ivanti, a leading enterprise software provider, has released critical security updates addressing vulnerabilities across...

Fortinet FortiVoice Zero-day Vulnerability Actively Exploited in The Wild

A critical stack-based buffer overflow vulnerability (CWE-121) has been discovered in multiple Fortinet products,...

Ransomware Attacks Surge by 123% Amid Evolving Tactics and Strategies

The 2025 Third-Party Breach Report from Black Kite highlights a staggering 123% surge in...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

Microsoft Patch Tuesday May 2025 Released With the Fixes for 72 Flaws With 5 Actively Exploited 0-Day

Microsoft has released its May 2025 Patch Tuesday updates, addressing 72 security vulnerabilities across...

Ivanti Released Security Updates to Fix for the Mutiple RCE Vulnerabilities – Patch Now

Ivanti, a leading enterprise software provider, has released critical security updates addressing vulnerabilities across...

Fortinet FortiVoice Zero-day Vulnerability Actively Exploited in The Wild

A critical stack-based buffer overflow vulnerability (CWE-121) has been discovered in multiple Fortinet products,...