Abahouse International: unauthorized access to member and order data

Apparel company Abahouse International believes its internal systems were accessed from late on 27 September into 28 September. On 28 September several customers asked about suspicious refund emails that matched their orders, and the investigation found traces of access to part of its member and order data. As it cannot pin down what was taken, it emailed customers who may be affected, based on purchase histories, on 2 October. Past order records of former members may also be included. Potentially affected fields include member IDs, names, addresses, phone numbers, emails, birth dates, genders and order details. The company believes an unauthorized login and a system flaw enabled malicious code to access the database.