A hacker is selling a database containing the information of 91 million Tokopedia accounts on a dark web market for as little as $5,000. Other threat actors have already started to crack passwords and share them online.

Tokopedia is Indonesia’s largest online store, with 4,700 employees and over 90 million active users.

This weekend, data breach monitoring and cybersecurity intelligence firm Under the Breach discovered that a hacker was offering the account information for 15 million Tokopedia users on an online hacker forum.

To access this data, forum users would need to spend eight site ‘credits’, which costs approximately €2.13.