Customers of a number of UK clothing and accessories websites have had their personal information exposed following a security breach at an IT services provider that they were sharing.
Brands such as Jaded London, AX Paris, Elle Belle Attire, Perfect Handbags, DLSB, and Traffic People entrusted web development and ecommerce company Fashion Nexus to help them build an online store.
White hat hacker Taylor Ralston was able to access a server containing a shared database containing personal details of the online clothing stores’ customers.
The exposed information contains personal information of approximately 1.3 million users.
It included password hashes (MD5 and SHA-1, both salted), names, dates of birth, email addresses, phone numbers, and other data.
There is no indication that payment card information was put at risk.
Source: https://grahamcluley.com/online-fashion-shoppers-exposed-ecommerce-breach/
"id": "THE2118101122",
"linkid": "the-white-room-ltd",
"type": "Breach",
"date": "07/2018",
"severity": "50",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
Join the conversation