Mindfactory breached; customer emails and encrypted passwords may be exposed
Hackers broke into Mindfactory, a German PC parts retailer, and may have accessed customer emails, phone numbers and home addresses. Encrypted passwords may be exposed, so the store reset customer passwords; the company says bank and card details were never stored in its shop. Customers should set a new password and change it anywhere it is reused.
What happened
Hackers broke into Mindfactory, a German PC parts retailer. They may have accessed customer emails, phone numbers and home addresses. Encrypted passwords may be exposed, so the store reset all customer passwords.
Why it matters
Customer contact data is potentially exposed, opening the way for phishing and social engineering against buyers. The company says bank and card details were never stored in its shop, which limits direct financial risk.
What to do
Reset your Mindfactory password and change it on any service where it is reused. Warn staff to be wary of emails and phone calls referencing purchases from the store.
For the technical team
- Affected
- Mindfactory Loja online da Mindfactory, varejista alemã de componentes de PC · Mindfactory online shop (customer accounts).
- Exploitation
- Breach reported by Intelligent Cyber Digest on X. Access to customer data is possible, not yet detailed.
- Fix
- Not applicable to a breach. The company reset customer passwords as mitigation.
- More details
- Data possibly accessed: emails, phone numbers and home addresses. Passwords were encrypted but may be exposed. According to the company, bank and card details were never stored in its shop.
Timeline
Incident opened.
Sources 1 source
- @IntCyberDigest @IntCyberDigest
