Friend
Professional
- Messages
- 2,670
- Reaction score
- 884
- Points
- 113
Durex India, the Indian division of the British brand of condoms and intimate lubricants, faced a leak of personal information of its customers. Data such as full names, contact details, shipping addresses, and order details, including the list of items purchased and payment amounts, were compromised.
According to data provided by a cybersecurity specialist, a vulnerability was discovered on the company's website that made customer data available without proper protection on the order confirmation page. As a result of the leak, hundreds of users were at risk, but the exact number of victims is unknown.
This leak is particularly troubling given that Durex is in the business of selling products related to the intimate realm, where privacy is paramount. According to the information, the vulnerability still persisted at the time of writing.
A spokesperson for Reckitt, which owns the Durex brand, declined to comment on the situation and did not say what measures would be taken to protect customer data.
Experts warn that leaked data can be used to steal personal information, and can also cause unwanted contact and harassment. The incident also caught the attention of India's Computer Emergency Response Team (CERT-In), which acknowledged receipt of notification of the problem.
Given the sensitive nature of the products the company offers, a data breach can have serious consequences for those affected, including the threat of social stigma and moral pressure.
Source
According to data provided by a cybersecurity specialist, a vulnerability was discovered on the company's website that made customer data available without proper protection on the order confirmation page. As a result of the leak, hundreds of users were at risk, but the exact number of victims is unknown.
This leak is particularly troubling given that Durex is in the business of selling products related to the intimate realm, where privacy is paramount. According to the information, the vulnerability still persisted at the time of writing.
A spokesperson for Reckitt, which owns the Durex brand, declined to comment on the situation and did not say what measures would be taken to protect customer data.
Experts warn that leaked data can be used to steal personal information, and can also cause unwanted contact and harassment. The incident also caught the attention of India's Computer Emergency Response Team (CERT-In), which acknowledged receipt of notification of the problem.
Given the sensitive nature of the products the company offers, a data breach can have serious consequences for those affected, including the threat of social stigma and moral pressure.
Source