Baby clothing giant Carter’s exposed trove of shoppers data

guest · Jun 21, 2021

Baby clothing giant Carter’s exposed trove of shoppers data
June 20, 2021
https://www.hackread.com/baby-clothing-giant-carters-data-expose/

VpnMentor analysts report that the US-based baby clothing retailer Carter’s exposed personally identifiable information (PII) of hundreds of thousands of its customers because of inadequate security of Linc, the automatic online purchases software the company uses.

The Linc system delivered shortened URLs with Carter’s purchases and shipping data without any appropriate security protections.
Click to expand...

Over 410,000 Records Exposed
It is reported that more than 410,000 records have been exposed in Carter’s data leak, including hundreds of thousands of customer records dating back to 2015.

VpnMentor noted that the shortened URLs are not only easy to discover by hackers since there is a “lack of sufficient entropy or compensating security protocols.”

For recent orders, threat actors can call a customer and discuss purchases they have made, posing as courier personnel or customer support. They can build rapport with their target and target them in their criminal schemes.

“For any purchases still on their way to a customer, hackers could redirect deliveries and steal them, reselling any Carter’s stolen products online,” vpnMentor researchers warned in their report.
Click to expand...

vpnMentor: Report: Biggest Baby Clothing Brand in the US Exposes 100,000s of Customers to Hacking and Fraud

Carter’s is the biggest marketer of apparel for babies and young children in the USA.

Linc (https://www.letslinc.com/) is a customer care automation platform that businesses use to improve the customer experience on their websites. Linc offers a range of tools to increase customer engagement, boost sales, and make a website more efficient.

Carter’s was using Linc to create shortened URLs to travel purchases made on its online store.
Click to expand...

Log in or Sign up

Baby clothing giant Carter’s exposed trove of shoppers data

guest Guest

Log in or Sign up

Baby clothing giant Carter’s exposed trove of shoppers data

guest Guest

Useful Searches