Amart Furniture
May 16, 2022
•[ leak, retail ]
In May 2022, the Australian retailer Amart Furniture advised that their warranty claims database hosted on Amazon Web Services had been the target of a cyber attack. Over 100k records containing email and physical address, names, phone numbers and passwords stored as bcrypt hashes were exposed and shared online by the attacker.
Americanas
May 13, 2022
•[ financial, retail ]
Brazilian e-commerce conglomerate Americanas.com report a multimillion-dollar loss in sales in its financial results (923 million Brazilian reais equivalent to $183 million) after a major cyber attack earlier this year.
Dis-Chem Pharmacies
May 1, 2022
•[ leak, retail ]
Dis-Chem Pharmacies reveals that nearly 3.7 million of its clients' records were compromised during an incident involving a third-party service provider.
Fanpass
April 30, 2022
•[ leak, retail ]
In April 2022, the UK based website for buying and selling soccer tickets Fanpass suffered a data breach which exposed 112k customer records. Impacted data includes names, phone numbers, physical addresses, purchase histories and salted password hashes. The data was provided to HIBP by a source who requested it be attributed to "breaches.net".
Fonseca Supermarkets
April 28, 2022
•[ ransomware, malware, retail ]
Vice Society encrypts network and threatens to leak data on their dark web portal.
Massy Stores
April 28, 2022
•[ hack, malware, retail ]
The largest supermarket chain in Trinidad struggled to recover from a cyberattack that caused outages at all of its locations throughout the country this weekend. On Thursday, Massy Stores released a statement saying it was experiencing "technical challenges" with its front-end checkout systems that made it so products could not be purchased from its supermarkets and pharmacies.
McDonald's Costa Rica
April 15, 2022
•[ hack, misconfiguration, retail ]
A hacker accessed sensitive data belonging to McDonald's Costa Rica customers through an exposed database managed by a third-party service provider.
Continent Express
April 15, 2022
•[ leak, hack, retail ]
In name of #OpRussia, the Anonymous-linked group NB 65 leaks nearly 400 GB of files and databases from Continent Express, Russia's largest independent travel agency.
DeeZee
April 12, 2022
•[ ransomware, leak, malware ]
Lorenz executed exfiltration of data and ransomeware in targeted network. Data presented on dark web "leak site"
Sonae
April 5, 2022
•[ ransomware, leak, malware ]
The RansomEXX ransomware gand drops leaked data samples on their TOR site.
Individuals in the UK
March 31, 2022
•[ social, phishing, retail ]
Cyber-criminals are impersonating the confectioner Cadbury online to steal personal data.
auchan
March 24, 2022
•[ hack, ddos, retail ]
In name of #OpRussia, the Anonymous collective takes down the Russian website of Auchan.
decathlon
March 24, 2022
•[ hack, ddos, retail ]
In name of #OpRussia, the Anonymous collective takes down the Russian website of Decathlon.
leroymerlin
March 24, 2022
•[ hack, ddos, retail ]
In name of #OpRussia, the Anonymous collective takes down the Russian website of Leroymerlin.
Mercado Libre
March 8, 2022
•[ hack, leak, retail ]
Argentinian e-commerce giant Mercado Libre confirms "unauthorized access" to a part of its source, adding that data of around 300,000 of its users was accessed by threat actors.
Element Vape
February 5, 2022
•[ hack, malware, retail ]
Online retailer is hacked and a credit card skimmer is installed on its site.
Mizuno
February 4, 2022
•[ ransomware, malware, retail ]
Sports brand Mizuno is hit with a ransomware attack impacting its corporate network and causing order delays.
Shoes for Crews
February 1, 2022
•[ ransomware, leak, malware ]
Documents Leaked on ransomware site.
Hong Kong Technology Venture Company
January 26, 2022
•[ hack, retail ]
Hong Kong's largest online shopping platforms is hacked and customer information is stolen.
Goodwill
January 14, 2022
•[ leak, misconfiguration, retail ]
American non-profit Goodwill suffers data breach involving information of customers using its e-commerce platform.