Dymocks Customer Data Risks becoming a bestseller on darknet shelves

Carding

Professional
Messages
2,870
Reaction score
2,511
Points
113
While the bookstore is investigating, 800,000 victims are hoping for a happy ending.

The Dymocks bookstore chain warns customers that their personal information has been disclosed as a result of a personal data leak. The incident became known after the company's database was published on hacker forums. Dymocks has 65 stores in Australia, New Zealand and Hong Kong, as well as an online store that sells printed and electronic books, stationery, games and educational products.

On September 6, 2023, the leak was reported to management by Troy Hunt, the creator of 'Have I Been Pwned', a service for monitoring such incidents. Dymocks itself reports that internal security systems were not compromised. It is possible that the leak was made by partners – researchers have yet to find out.

According to preliminary information, the following information was stolen:
  • Full name
  • Date of birth
  • Email address
  • Mailing address
  • Paul
  • Membership details (current account status, date of creation, and privilege level on the client's card)
Representatives stressed that the clients ' financial data is not stored in electronic databases, so they could not be stolen by intruders. The 'Have I Been Pwned' service confirmed that 1.2 million records for 836,120 unique Dymocks accounts were publicly available.

All relevant authorities have already been informed about the incident. Dymocks specialists continue to investigate. The company also assures that it takes all necessary measures to make purchases in the online store as safe as possible.

According to Troy Hunt, customer data has been circulating through various Telegram channels and hacker forums since at least June. This suggests that hackers have already used the stolen information to conduct phishing attacks or other fraudulent campaigns.

Although the passwords were not posted online, users are strongly encouraged to change them. If the same password was used on other sites, experts recommend changing it there as well. You can also pay special attention to emails that ask for credit card information or credentials.
 
Top