01—Abstract
Summary
Summary of the 8-K filed March 7, 2022. Cited figures are marked; the original filing is the authoritative source.
MercadoLibre, Inc. (MELI) filed an 8-K on March 7, 2022, to disclose a recent cybersecurity incident.
The company detected unauthorized access to its source code. While data pertaining to approximately 300,000 users was accessed, this represents a small fraction of their nearly 140 million unique active users. Importantly, MercadoLibre's initial analysis indicates no evidence of compromise to their infrastructure systems.
Furthermore, there is no indication that users' passwords, account balances, investment information, financial details, or credit card information were obtained by unauthorized parties. The company has activated security protocols and is implementing measures to prevent future incidents.
02—Key points
Key Highlights
- MercadoLibre experienced unauthorized access to its source code.
- Data of approximately 300,000 users was accessed.
- This affected less than 0.22% of MercadoLibre's nearly 140 million unique active users.
- Initial analysis shows no compromise of core infrastructure systems.
- No evidence found of access to user passwords, account balances, investments, financial information, or credit card details.
- The company has activated security protocols and is taking measures to prevent recurrence.
- This disclosure is made under Regulation FD.
03—Questions
Frequently Asked Questions
What type of data was accessed in the breach?
Data pertaining to approximately 300,000 users was accessed. However, initial analysis suggests that this did not include sensitive financial information, account balances, investment details, or passwords.
How significant is the number of affected users?
The 300,000 affected users represent a very small percentage (less than 0.22%) of MercadoLibre's nearly 140 million unique active users as of the filing date.
Has MercadoLibre's core system or financial data been compromised?
According to the company's initial analysis, there is no evidence that their infrastructure systems have been compromised or that users' passwords, account balances, investments, financial information, or credit card information were obtained.
What actions is MercadoLibre taking in response to the incident?
MercadoLibre has activated its security protocols, is conducting an exhaustive analysis, and is implementing strict measures to prevent further incidents.
04—Continue