Stolen data reveals personal information of 1.6 million Etsy and other TikTok store clients - here's the lowdown.
Millions of Customer Files from Etsy, Poshmark, and TikTok Shop Allegedly Exposed
CyberNews researchers have discovered over 1.6 million files, allegedly belonging to customers of the aforementioned online shopping platforms, in two apparently unsecured Azure Blob Storage containers. The exposed data included sensitive information such as full names, home addresses, email addresses, and shipping order details.
The findings suggest that the misconfigured storage containers left customer information, primarily in the form of shipping confirmation emails in HTML format, vulnerable to unauthorized access. The ownership of the unsecured containers remains unclear at this time.
The majority of the exposed users hail from the United States, with some from Canada and Australia. Although it's unknown whether cybercriminals have gained access to these datasets, the risk of sensitive information being used for social engineering attacks is a significant concern.
Attackers might impersonate trusted shipping providers or the platforms themselves, making fraudulent communications seem more credible and urging victims to provide personal details, potentially leading to financial loss.
In light of such data breaches, internet users are advised to take precautions such as regularly checking their accounts for suspicious activity, using strong, unique passwords, and monitoring their credit reports. Businesses are urged to implement restricted cloud environment access, conduct regular security audits, and invest in secure communication protocols and server-side encryption to protect customer information.
For those keen on safeguarding their digital identity, Aura has emerged as a popular choice among our platform editors. Offering upfront pricing and a simple interface, Aura's security solution includes a password manager, VPN, and antivirus, making it an attractive deal.
- The security lapse uncovered by CyberNews involves personal-finance details from shipping order details, increasing the risk of cybercriminals launching social engineering attacks using technology like email or impersonating trusted entities in finance.
- In the aftermath of data-and-cloud-computing breaches like the recent one from Etsy, Poshmark, and TikTok Shop, it is crucial for businesses to prioritize cybersecurity measures, such as investing in secure technology and implementing encryption to protect customer data and personal-finance information.
