Breaches and incidents
ABAHOUSE International: overseas intruder installs program and reads member and order database
ABAHOUSE said an overseas third party accessed internal systems from late 27 Sep to 28 Sep and member ID, name, address, phone, email, DOB, gender and...
- Disclosed
- Verification
- Checked against a primary source
What happened
- ABAHOUSE said an overseas third party accessed internal systems from late 27 Sep to 28 Sep and member ID, name, address, phone, email, DOB, gender and order details may have leaked; it was alerted when customers reported fake refund emails that matched their orders.
- Root cause per the company: an unauthorized login to internal systems, then exploitation of a system weakness to install and run a malicious program that reached the member/order database.
- No attacker named (only “an overseas third party”).
- The route was blocked; the PPC notified; customers advised to change passwords and watch for phishing; count not disclosed.