Euglena: akyrise breach exposes up to about 900,000 customer records and 490,000 login records

On 4 November Euglena confirmed unauthorized access and a member-data leak at the akyrise online shop, which it immediately closed. It filed a preliminary report with the privacy regulator on 5 November. The cause and exact scope remain under investigation; no misuse has been confirmed. [1]

Up to about 900,000 registration/purchase records contain names, addresses, phone numbers, birth dates, gender, email addresses and purchase/delivery details. A separate cohort of up to about 490,000 login records contains customer IDs, email addresses and hashed login passwords. Former members are included. Overlap between the cohorts is unknown, so they are not added together. Card data is not stored on the server. [1]

Existing orders and subscription deliveries continue after checks. The email-address leak through repica and possible delivery-data leak through Sagawa disclosed in the same notice belong to separate attacks and separate incident records. [1]