Polish fashion giant BrandBQ leaked the data of up to 6.7 million Europeans

guest · Sep 28, 2020

Polish fashion giant BrandBQ leaked the data of up to 6.7m Europeans
September 28, 2020
https://www.teiss.co.uk/brandbq-database-exposure/

The massive yet unprotected database owned by BrandBQ was discovered in June by security researchers at vpnMentor who found that the database contained data obtained from the online stores of a couple of brands owned by BrandBQ- Answear, and WearMedicine.com.

The database was over 1 terabyte in size when it was discovered and contained over 1 billion data records, including full names, phone numbers, email addresses, dates of birth, IP addresses, home addresses, gender, product searches, and payment records.

"BrandBQ’s database contained over 1 billion entries, including up to 6.7 million records related to the data of people using its websites. Most of the database’s entries were activity logs from customer actions on the affected websites, including newsletter registrations, purchases (and related checkout details), user agreements, and morem" vpnMentor said.
Click to expand...

The database was found storing the full names, email addresses, home addresses, phone numbers, and VAT numbers of BrandBQ's local contractors in seven countries as well as their purchase information, payment methods, and product prices. This information could enable cyber criminals to target or spoof local contractors who may not be able to recover from a cyber attack.
Click to expand...

vpnMentor: Report: Online Fashion Retailer Exposes European Customers in Massive Data Leak

Finally, BrandBQ’s database inadvertently revealed sensitive technical information about its structure and security setup.
This included roughly 49 million entries that exposed how websites using the database responded to system errors and blacklisted emails (if an email address used on a website becomes associated with fraud or spam). They also showed internal logs and other resources within the database.
Click to expand...

We also received the following reply from Answear on the 24th of August:

We want to draw conclusions from the incident so we can be one of the safest stores operating on the market in the future, where all customer data is safe so that a similar situation cannot happen again in the future.

We are impressed with the effectiveness of your internet scanning service in terms of detecting possible leaks and the risk of data leakage. However, we must indicate a few inconsistencies in the report [...]
Click to expand...

Log in or Sign up

Polish fashion giant BrandBQ leaked the data of up to 6.7 million Europeans

guest Guest

Log in or Sign up

Polish fashion giant BrandBQ leaked the data of up to 6.7 million Europeans

guest Guest

Useful Searches