Sydney Tools

A substantial data leak at Sydney Tools left an unsecured database online, exposing sensitive data of employees and customers. Over 5,000 employee records including names, employment branches, salaries, and sales targets were leaked, suggesting a risk of phishing or identity theft. Furthermore, over 34 million purchase records potentially compromised customers' names, contact information, and purchase details. This breach threatens the privacy of millions and underscores the danger of unprotected databases in today's digital landscape.

Source: https://www.techradar.com/pro/security/top-home-hardware-firm-data-leak-could-see-34-million-customers-affected

TPRM report: https://scoringcyber.rankiteo.com/company/sydney-tools

"id": "syd917032625",
"linkid": "sydney-tools",
"type": "Breach",
"date": "3/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Over 34 million',
                        'industry': 'Retail',
                        'location': 'Australia',
                        'name': 'Sydney Tools',
                        'type': 'Company'}],
 'attack_vector': 'Unsecured Database',
 'data_breach': {'number_of_records_exposed': ['Over 5,000 employee records',
                                               'Over 34 million purchase '
                                               'records'],
                 'personally_identifiable_information': ['Names',
                                                         'Contact Information',
                                                         'Purchase Details',
                                                         'Employment Branches',
                                                         'Salaries',
                                                         'Sales Targets'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Employee Data',
                                              'Customer Data']},
 'description': 'A substantial data leak at Sydney Tools left an unsecured '
                'database online, exposing sensitive data of employees and '
                'customers.',
 'impact': {'data_compromised': ['Employee Records', 'Purchase Records'],
            'identity_theft_risk': 'High'},
 'title': 'Sydney Tools Data Leak',
 'type': 'Data Leak',
 'vulnerability_exploited': 'Unsecured Database'}