H-Hotels AG
December 11, 2022
•[ ransomware, retail ]
The Play ransomware gang has claimed responsibility for a cyber attack on H-Hotels (h-hotels.com) that has resulted in communication outages for the company.
GunAuction.com
December 3, 2022
•[ hack, misconfiguration, retail ]
In December 2022, the online firearms auction website GunAuction.com suffered a data breach which was later discovered left unprotected on the hacker's server. The data included over 565k user records with extensive personal data including email, IP and physical addresses, names, phone numbers, genders, years of birth, credit card type and passwords stored in plain text. The leaked identities could subsequently be matched to firearms listed for sale on the website.
Cetrogar
December 2, 2022
•[ ransomware, malware, retail ]
The Argentinian retailer of technology, household items, and appliances has reportedly been affected by a ransomware attack at the beginning of December.
Camst
November 29, 2022
•[ ransomware, malware, retail ]
Camst, an Italian company operating in the catering services, is hit with a ransomware attack.
Nissan of Las Cruces
November 13, 2022
•[ ransomware, malware, retail ]
Lorenz encrypted and leaked data stolen from Nissan of Las Cruces onto their dark web site
Sobeys
November 7, 2022
•[ ransomware, malware, retail ]
The Canadian food retail giant Sobeys is hit with a Black Basta ransomware attack.
Ukranian military retailers
November 2, 2022
•[ hack, ddos, retail ]
Anonymous Russia claims to have conducted DDoS attacks against two Ukrainian shops selling military equipment.
Ukranian retailers
November 1, 2022
•[ hack, ddos, retail ]
Anonymous Russia claims to have conducted DDoS attacks against the websites of four Ukrainian online retailers.
Harry Rosen
October 31, 2022
•[ ransomware, malware, retail ]
Canadian menswear retailer Harry Rosen acknowledges being hit by a BianLian ransomware attack.
Bed Bath & Beyond
October 29, 2022
•[ social, phishing, retail ]
Bed Bath & Beyond reveals in an SEC filing that it recently suffered a data breach after an employee fell victim to a phishing attack.
Miracapo pizza company
October 26, 2022
•[ ransomware, malware, retail ]
Lorenz encrypted and leaked data stolen from Miracapo pizza company onto their dark web site
Pendragon Group
October 21, 2022
•[ ransomware, malware, retail ]
Pendragon Group, with more than 200 car dealerships in the U.K., is breached in a cyberattack from the LockBit ransomware gang, who allegedly demanded $60 million to decrypt files and not leak them.
Vinomofo
October 17, 2022
•[ leak, retail ]
Wine retailer Vinomofo is targeted by threat actors, with reports suggesting as many as half a million customers may have had their information exposed.
iDealwine
October 15, 2022
•[ leak, retail ]
Popular international fine wine online retailer iDealwine suffers a data breach.
MyDeal
October 14, 2022
•[ hack, retail ]
Woolworths' MyDeal subsidiary, an Australian retail marketplace, discloses a data breach affecting 2.2 million customers, with the hacker trying to sell the stolen data on a hacker forum.
Carousel
October 14, 2022
•[ hack, retail ]
Carousell, a buy-and-sell digital platform used by around four in ten Singaporeans, is hacked, leaving 1.95 million customer details exposed.
Russian specialized online drone stores
October 4, 2022
•[ hack, ddos, retail ]
DDoS Campaign: IT Army of Ukraine has conducted a DDoS campaign against close to 70 Russian specialized online drone stores.
Digital Network System (DNS)
October 2, 2022
•[ ransomware, malware, retail ]
Russian retail chain DNS (Digital Network System) discloses that they suffered a data breach that exposed the personal information of customers and employees, allegedly carried out by pro-Ukrainian attackers via ransomware.
Locally
October 1, 2022
•[ leak, retail ]
In October 2022, "The Industry's Leading Online-to-Offline Shopping Solution" Locally suffered a data breach. Whilst Locally acknowledged the breach privately, it's unknown whether impacted customers were subsequently notified of the incident which exposed over 362k names, phone numbers, email and physical addresses, purchases, credit card type and last four digits and bcrypt password hashes.
DLS Motors Paraguay
September 29, 2022
•[ ransomware, malware, retail ]
Avos Locker adds DLS Motors Paraguay to its leak site, and claims to have 50 GB of information.
