Categories: Ad Guardian PlusNews

Over 1TB of customer data leaked

Vpnmentor discovered over 1TB of customer data leaked from a huge online retailer.  Researchers found the breach in the security of LigthInTheBox – a Chinese online retailer with a significant North American fan base.

Researchers managed to gain access to a database containing over 1 TB of customers data, meaning daily logs. These total up over 1.5 billion records.

The leak compromised the security of customers all around the world. Also, researchers accessed data from subsidiary sites, such as MiniInTheBox.com.

“Our team was able to access this database because it was completely unsecured and unencrypted,” researchers mentioned.

Vpnmentor notified the vendor of the breach on November 24. The owner closed it shortly after, although it did not reply.

LightInTheBox sells clothing, different items for the home and garden, but also clothing, accessories and gadgets. Most of the 12 million monthly visitors are based in North America and Europe.

Although it closed the breach, the company has not provided any specific details about their data security and storage practices. Also, it has not made public any of the measures they may take to protect their customers’ data.

“The data breach affected customers around the world, with entries from many of their international sites, and in numerous languages,” Vpnmentor researchers rote.

Additional risks

The security specialists disclosed that the over 1TB of customer data leak exposed email addresses, users’ IP addresses, countries of residence, and the destination pages. Also, the recordings of the online activity of users on the vendor’s website.

“This data breach represents a major lapse in LightInTheBox’s data security. While this data leak doesn’t expose critical user data, some basic security measures were not taken,” mentioned researchers.

Also, they warned that a leak of this nature could put customers at risk. They could become the victims of crimes far more disturbing than online fraud.

“With a website user’s IP address, we were able to identify their city of residence. If a criminal hacker had access to this, along with the other data exposed, they could trick a victim into revealing their home address, and target them for theft and home robbery,” researchers warned.

Laurentiu Titei

Recent Posts

Download Driver Canon iP2770 and Install on Windows 11/10

Despite being discontinued, the Canon iP2770 is still a user favorite energy-efficient inkjet printer with…

22 hours ago

Fix the Ubotie Keyboard Not Working Problem with Easy Steps

Ubotie is a renowned electronics brand. It offers a range of computer peripheral devices, including…

1 day ago

Epson LX 310 Driver Download and Update on Windows 11/10

Epson LX 310 is a dot matrix printing machine offering the best-in-class print quality. While…

1 day ago

Roxio Video Capture USB Driver Download with Easy Steps

Is Windows unable to recognize your Roxio Video Capture USB device? Then, it may be…

2 days ago

Download Kyocera Printer Driver Easily for Windows 11/10

Kyocera is a renowned printer brand for its reliability, high-quality printing in large volumes, and…

2 days ago

OpenGL Driver Download For Windows 10,11

Are you experiencing lag or poor graphics performance while gaming or using graphics-intensive applications? The…

2 days ago