Netshoes data breach: 499K accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2017-12-10
In December 2017, the online Brazilian retailer known as Netshoes had half a million records allegedly hacked from their system posted publicly. The company was contacted by local Brazilian media outlet Tecmundo and subsequently advised that no indications have been identified of an invasion of the company's systems. However, Netshoes' own systems successfully confirm the presence of matching identifiers and email addresses from the data set, indicating a high likelihood that the data originated from them. Exposed data: dates of birth, email addresses, names, purchases. The breach dates from Dec 7, 2017; Have I Been Pwned loaded it on Dec 10, 2017.
What to do
- If you had a Netshoes account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
Sources
All live incidents on Threat Watch