Two apparently unsecured Azure Blob Storage containers holding a combined 1.6 million files have been discovered by CyberNews researchers, allegedly belonging to online shopping platforms Etsy, Poshmark, and TikTok Shop.
The researchers say these files contained personally identifiable information, such as full names, home addresses, email addresses, and shipping order details.
Anyone who uses these services should keep a close eye on their accounts and take a look at the best identity theft monitoring tools if they are concerned.
Save up to 68% on identity theft protection for TechRadar readers!
TechRadar editors praise Aura's upfront pricing and simplicity. Aura also includes a password manager, VPN, and antivirus to make its security solution an even more compelling deal.
Preferred partner (What does this mean?)View Deal
Customers at riskBoth of the exposed instances “contained shipping email confirmations in HTML format,” researchers confirmed, and the vast majority of users exposed are in the United States, with some from Canada and Australia.
The exact origin or ownership of the datasets is not yet known, but the nature of the information suggests that these belonged to one particular storefront (across multiple shopping platforms), in particular a Vietnamese-based embroidery service.
It’s also not known whether cybercriminals have accessed these datasets, but only an internal forensic audit would reveal this information.
Researchers outlined the risk this brings to those exposed, such as convincing social engineering attacks from cybercriminals posing as Etsy or TikTok shop - urging customers to give their details, resulting in potential financial loss.
“With access to personal information like full names and addresses, attackers could impersonate trusted shipping providers or Etsy itself, making fraudulent communications seem more credible and urging victims to take actions such as confirming personal details, making payment, or clicking malicious links,” the researchers said.
Data leaks are unfortunately all too common for internet users today.
We recommend regularly checking whether your details have been exposed, using services like Have I Been Pwned - and monitoring your accounts, statements, and transactions - and immediately reporting any suspicious or unexpected activity with your bank or credit card provider.
You might also likeElectronic Arts has canceled Cliffhanger Games' Black Panther game and closed down the studio.
In an email sent to staff (as seen and reported by IGN), EA Entertainment president Laura Miele shared the announcement and said the decision to cancel the game and close the studio was to "sharpen our focus and put our creative energy behind the most significant growth opportunities."
The number of employees affected by the decision hasn't been confirmed at this time, but IGN understands that the total number of layoffs is less than the 300 roles that were cut last month across Respawn and several other studios.
It's also understood that EA has laid off some individuals from its mobile and central teams.
"These decisions are hard," Miele wrote in the email. "They affect people we’ve worked with, learned from, and shared real moments with. We’re doing everything we can to support them - including finding opportunities within EA, where we’ve had success helping people land in new roles."
Miele's email also mentioned that EA will now focus on a small handful of franchises going forward, like Battlefield, The Sims, Skate, and Apex Legends.
The president also said that EA will continue to invest in Motive's Iron Man game and Respawn's third Star Wars: Jedi game, the Mass Effect 5, while also maintaining its mobile business
Cliffhanger's Black Panther project was announced in 2023 and was being worked on by developers who previously led the Shadow of Mordor series.
Platforms weren't confirmed at the time, and there was no trailer to accompany the game's reveal, but we did know that it was an "original, third-person, single-player Black Panther game".
At the time, project lead Kevin Stephens said the game was going to be a "definitive and authentic Black Panther experience".
"Wakanda is a rich superhero sandbox, and our mission is to develop an epic world for players who love Black Panther and want to explore the world of Wakanda as much as we do," Stephens said.
You might also like...