Hacker Retracts Max Breach Claim as Company Reports No Signs of Intrusion
Max says user data are stored only on Russian servers.
Overview
- The anonymous poster who alleged a leak affecting more than 15 million Max users said his earlier claim was incorrect and that such a database does not exist.
- Max called the viral reports a fake and said security log analysis found no suspicious activity indicating a compromise.
- The company reported no submissions to its BugBounty program related to the claim and stated it does not use the Bcrypt method cited in the posts.
- Max said the sample data circulating online do not pertain to the service and noted it does not store fields such as location, birthdate, email, INN, SNILS, usernames, or account levels.
- A Russian lawmaker described the talk of a full breach as a deliberate information dump, while coverage noted Telegram channels rapidly amplified the initial anonymous claim.