Charm: unauthorized access to its pet supplies online store

On 13 August, pet supplies retailer Charm said its two Charm Honten online stores were accessed by a third party. It detected the access on 11 August, cut off access to the servers and stopped orders and shipping for the stores. The third report, updated on 2 September, put confirmed leaks at about 370,000 records and possible leaks at about 20,000, about 390,000 in total, and some customers' accounts were logged in to by a third party. Names, addresses, phone numbers, birth dates, genders, emails and hashed passwords were included; card data was not. Before the September 2 deduplication correction it had reported about 430,000 records, retained as the historical maximum. The October 7 fourth report identified approximately 25,000 former-member records in the separately investigated cohort, with leakage confirmed for most. No unauthorized logins to former members were found.