Raksul: upload-system intrusion may expose personal information in print files and other data

At about 00:20 on 8 November, Raksul identified unauthorized access to upload-processing systems using stolen credentials. Stored print files, invoices and Web Mail data may expose names, company names, addresses, phone numbers, email and other information. People printed on business cards or postcards may be affected even if they did not place an order. Counts and the affected period are under investigation. Card details, login IDs and passwords were confirmed not leaked. [1]

Abused credentials and accounts were disabled, and some upload-dependent services were stopped on 8 November. Services began resuming at 07:00 on 9 November, but Raksul Package, Adobe Express integration, design-production requests and the catalog site remain suspended. Data checking and shipment may be delayed; this is not a full restoration. No secondary harm is confirmed. [1]