SHEIN Data breach affected 6.42 million users
25.9.2018 securityaffairs Incindent

Another fashion retailer suffered a data breach, the victim is SHEIN that announces the security breach affected 6.42 million customers.
The retailer hired a forensic cybersecurity firm as well as an international law firm to investigate the security breach.

SHEIN is now notifying affected users and it is urging them to change the password for their account.

The online fashion retailer announced a security breach last week, according to the firm the attackers carried out “a sophisticated criminal cyberattack on its computer network.”

“On August 22, 2018, SHEIN became aware that certain personally identifiable information of its customers was stolen during a concerted criminal cyberattack on its computer network.” reads the data breach notification.

“Immediately upon becoming aware of this potential theft, SHEIN hired a leading international forensic cybersecurity firm as well as an international law firm to conduct a thorough investigation.”

Hacker accessed customers personal information, including email addresses and encrypted password credentials of customers who visited the online store.

There are no technical details about the incident, the company only confirmed to have found a malware on its servers and has promptly removed it.

” In addition, SHEIN servers have been scanned and malware found on the servers has been removed. “Back door” entry points to the servers opened by the attackers have been closed and removed.” continues the press release.

According to the data breach notification, there is no evidence that financial data have been stolen by hackers, SHEIN remarked that it does not store credit card information on its systems

“We have seen no evidence that your credit card information was taken from our systems and SHEIN typically does not store credit card information on its systems,” added the company.