DailyObjects data breach: 464K accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2020-01-28
In approximately January 2018, a collection of more than 464k customer records from the Indian online retailer DailyObjects were leaked online. The data included names, physical and email addresses, phone numbers and "pincodes" stored in plain text. After multiple attempts to contact them, DailyObjects responded and received a copy of the data for verification, however failed to respond to multiple contact attempts following that. Exposed data: email addresses, names, passwords, phone numbers, physical addresses. The breach dates from Jan 1, 2018; Have I Been Pwned loaded it on Jan 28, 2020.
What to do
- If you had a DailyObjects account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
