[Contained][Severity: Major][Credential abuse]

Lieferant: unauthorized login to the ecoco order account leaks buyers’ names, addresses and order data

An intruder logged into the order and shipping account for the ecoco pocket Wi-Fi brand and downloaded order CSVs with buyers’ and recipients’ names, addresses and phones.

Disclosed

2026-11-05

Organizations involved

Leaked or at risk

Unknown

Downtime

Unknown

What happened

According to Lieferant Inc., in the early hours of 2 November a third party logged into the account used for order and shipping management and downloaded order detail CSVs containing personal data, along with previously imported order CSVs. Buyers at the ecoco online shop and the ecoco Rakuten Ichiba store are affected; the data found covers orders from September 2026 onward. It includes names, addresses, phones, emails, order contents, payment method types, shipping numbers and notes, as well as recipients’ details. Card data is not included. The count is under investigation. [1]

By 4 November it had changed the password and introduced two-factor authentication. [1]

Identified suspicious sessions were invalidated and the password reset; two-factor authentication was enabled on 4 November. The exact number of people remains under review; repeated orders are not counted as distinct people. [1]