Data Leak Hits 2.5 Million Customers of Cosmetics Giant Yves Rocher

guest · Sep 3, 2019

Data Leak Hits 2.5 Million Customers of Cosmetics Giant Yves Rocher
September 3, 2019
https://www.infosecurity-magazine.com/news/data-leak-affects-25m-customers/

A French retail consultancy exposed data on millions of its clients’ customers as well as sensitive business information, after researchers discovered an unsecured Elasticsearch database.

Aliznet, which specializes in digital transformation, names the likes of tech giants IBM, Oracle and Salesforce, retail leaders like Auchan, and big brands including Yves Rocher and Lacoste as its clients.
However, researchers from vpnMentor were able to access a private Aliznet database containing data on 2.5 million Canadian Yves Rocher customers. This included names, phone numbers, email addresses, dates of birth and postcodes.

They also discovered over six million customer orders in the database, including transaction amount, currency used, delivery date and store location.

“Each order is also linked with a unique customer ID. Using the leaked Yves Rocher customer records, we were able to identify the individual who placed each order through their customer ID,” the researchers explained.
Click to expand...

vpnMentor: Report: Aliznet Data Breach Exposes Data for Millions of Canadian Customers

Log in or Sign up

Data Leak Hits 2.5 Million Customers of Cosmetics Giant Yves Rocher

guest Guest

Log in or Sign up

Data Leak Hits 2.5 Million Customers of Cosmetics Giant Yves Rocher

guest Guest

Useful Searches