Sephora’s Online Customers Suffer Data Breach

Date:

Share post:

Any kind of business would become a target for attackers, who are on the hunt for valuable information.   Sephora, a provider of personal care and beauty products, recently revealed a data breach that exposed around 3.7 million of its online customers’ records. The French-based cosmetics company said that hackers reportedly posted the compromised information on the dark web for sale.

According to a cybersecurity firm Group-IB, hackers have breached personal data of Sephora’s customers in Hong Kong, Singapore, Thailand, Indonesia, Philippines, Malaysia, Australia, and New Zealand. Sephora stated that the customers who only used the company’s online services or mobile app are affected in the incident.

The exposed information included details like gender, name, surname, skin tone, ethnicity addresses, email details, and contact details. However, Sephora clarified no credit card details were compromised in the incident and they’ve not found any misuse of the stolen data.

Earlier, around 10 French-based companies had fallen victim to a global hacking attack that hit hospitals, car factories, and other organizations in more than 150 countries. The announcement was made by the French government cybersecurity agency ANSII.

In another incident, French automaker Renault had to stop production of vehicles at various sites to prevent the spread of a ransomware cyberattack. Fortunately, France, Romania, and Slovenia had already undertaken preventive measures to stop the spread of the ransomware. Due to this, more than 90 percent of factories in France were running normally. Renault also resumed production within a few days. All Renault factories are back to normal including northern France plant in Douai, a Renault spokesman said.

Subscribe

Name(Required)
Privacy(Required)

Upcoming Events

Related articles

What the Nuclear Treaty Got Right, and Why AI Still Can’t Use It

By Jay Bavisi, Founder & Group President, EC-Council Nuclear treaties stopped bombs. They don't stop a file you can...

EC-Council Releases ADG 2.0 and Offers Its AI Governance Crosswalks Free to Every Government, Regulator, and Standards Body as Nations Split on AI Rules

With autonomous AI agents already reaching into government systems and no global treaty in sight, EC-Council will assist...

Stop Reviewing Faster: A Practical Model for AppSec at AI Speed

By Aparna Ash Himmatramka A developer using an AI assistant can ship a feature in an afternoon. In many...

Why I Go to the Dark Web Every Day

By Alex Holden, Chief Information Security Officer Hold Security For nearly two decades I made the Dark Web a...