n0n group alleges breach of Staples Business Advantage platform
The n0n group alleges it breached Staples Business Advantage, Staples' corporate contract and purchasing platform. According to AlvieriD, the listing includes data on 200 employees, 30 customer Social Security numbers, purchasing chat logs, and IP addresses. Staples has not confirmed the incident; customers should contact Staples and check for data exposure.
What happened
The n0n group alleges it breached Staples Business Advantage, Staples' corporate contract and purchasing platform. The listing includes data on 200 employees and Social Security numbers of 30 customers. Staples has not confirmed the incident.
Why it matters
Exposed Social Security numbers and employee data create fraud risk and potential regulatory complaints. Companies using the platform may have purchasing chat logs and IP addresses disclosed. This remains an allegation, unconfirmed by Staples.
What to do
Contact Staples to confirm the scope, check whether your company uses Business Advantage, and verify if employee or customer data appears in the listing. Prepare credit monitoring for affected individuals.
For the technical team
- Affected
- Staples Business Advantage, plataforma de contratos e compras corporativas da Staples · Staples Business Advantage, Staples' corporate contract and purchasing platform.
- Exploitation
- No technical breach detail; the n0n group listed the data as proof of the attack, reported by AlvieriD on X.
- Fix
- No software to update
- More details
- Listed data: 200 employees, 30 customer Social Security numbers, purchasing chat logs, and IP addresses. Staples has not confirmed. Single source: AlvieriD post.
Timeline
Incident opened.
Sources 1 source
- @AlvieriD @AlvieriD
