Article Complete
AIM
TikTok Hijacking, Over 2 Billion Users Struggling With a Lost Data Record: Security Researchers
TikTok Hijacking, Over 2 Billion Users Struggling With a Lost Data Record: Security Researchers

TikTok Hijacking, Over 2 Billion Users Struggling With a Lost Data Record: Security Researchers

A TikTok spokesperson reportedly said that their team “inspected this issue and ascertained that the code in question is irrelevant to TikTok's backend source code.”

Published Updated

Key takeaways

  • Cyber security researchers have identified a potential data breach involving nearly 2 billion TikTok users.
  • Concerns arose when analysts reported access to TikTok's storage containing personal user data through an insecure server.
  • TikTok has denied allegations of a breach, stating that the relevant code does not pertain to its backend source code.
  • A vulnerability in the TikTok Android app could enable hackers to hijack user accounts via a single malicious link.
  • The situation highlights significant privacy risks for users, raising alarms among tech experts regarding data security.
5 min

Cyber security researchers on Monday unveiled a possible data hack in the Chinese short-form video app, TikTok. The hack is alleged to involve the database records of almost 2 billion users. 

On the same day, Twitter encountered posts from several cyber security analysts on “discovering a security breach of an insecure server that propelled access to TikTok's storage, which contained personal user data”.  

“This is your forewarning. #TikTok has reportedly suffered a #data #breach; if true, there may be fallout from it in the coming days. We recommend you change your TikTok #password and enable Two-Factor Authentication if you have not done so already,” tweeted BeeHive CyberSecurity. It further mentioned that it has inspected a sample of the extracted data and communicated via email to private clients and email subscribers.

A TikTok spokesperson reportedly said that their team “inspected this issue and ascertained that the code in question is irrelevant to TikTok's backend source code.”

The issue was further quoted by the Microsoft 365 defender research team—tracking down a susceptibility in the TikTok app for Android, allowing hackers to take over the personal data of millions of users with a single malicious link. 

The Chinese company is said to have denied all the allegations, after hackers claim to have user data and source code.

The susceptibility can cause harm to millions of users, exploiting privacy by providing leverage to security attackers, as expressed by tech giants in a statement last week. 

Membership

Stay ahead with AI insights.

Unlimited access to premium articles, exclusive analysis, and the stories shaping India's AI economy.

Subscribe now

AIM Americas

1190 Miraloma Way Suite P, Sunnyvale, CA 94085

AIM India

1st Floor, Sakti Statesman, Bellandur, Bengaluru – 560103

© 2026 AIM. All rights reserved.