Veja stated that it was the victim of a hacking of its website and the cybercriminal took the opportunity to seize the customer database of the company.
The computer file contains the e-mail addresses of customers who have purchased online or registered to receive Veja news.
The company stated that there were no bank details in nature because they do not store them and the stolen passwords were protected by encryption.
TPRM report: https://scoringcyber.rankiteo.com/company/veja
"id": "vej17362123",
"linkid": "veja",
"type": "Data Leak",
"date": "05/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Retail',
'name': 'Veja',
'type': 'Company'}],
'attack_vector': 'Website Hacking',
'data_breach': {'data_encryption': True,
'data_exfiltration': True,
'type_of_data_compromised': ['Email addresses',
'Encrypted passwords']},
'description': 'Veja reported a hacking incident where a cybercriminal seized '
'the customer database containing email addresses of customers '
'who purchased online or registered to receive news. The '
'company assured that no bank details were compromised as they '
'do not store them, and the stolen passwords were encrypted.',
'impact': {'data_compromised': ['Email addresses', 'Encrypted passwords'],
'systems_affected': ['Website']},
'title': 'Veja Website Hack and Customer Database Breach',
'type': 'Data Breach'}