EDION: online-shop server logs breached; data on 9,554 order customers and others may have leaked

At about 18:30 on 5 November EDION discovered unauthorized access exploiting a vulnerability in the server area holding EC logs and possible data exposure. No unauthorized access to or leak from the customer database itself has been confirmed. It blocked the route and fixed the issue, and the shop continues normal operation following external assessment. [1]

Potentially affected cohorts are 4,131 people with profile data such as names, emails, phones, birth dates, gender, addresses and customer IDs, and 9,554 people with order data such as names, customer IDs, order numbers and amounts. Combining logs can sometimes reveal emails, phones, postal/area data, card expiry dates and EDION prepaid gift-card numbers. The cohorts overlap and are not added together. Full credit-card numbers and login passwords are excluded. [1]