Sephora data breach: 780K accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2019-10-06
In approximately January 2017, the beauty store Sephora suffered a data breach. Impacting customers in South East Asia, Australia and New Zealand, 780k unique email addresses were included in the breach alongside names, genders, dates of birth, ethnicities and other personal information. Exposed data: dates of birth, email addresses, ethnicities, genders, names, physical attributes. The breach dates from Jan 9, 2017; Have I Been Pwned loaded it on Oct 6, 2019.
What to do
- If you had a Sephora account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
Sources
All live incidents on Threat Watch