[Contained][Severity: Major][Web app exploit]

THS: Unicolle shop breached, data of up to 19,468 members leaked

Attackers exploited a program flaw in the Unicolle uniform shop and took member names, birth dates, addresses and employers. Passwords and cards were not included.

Disclosed

2026-11-05

Organizations involved

Leaked or at risk

19.5K

19,468

Downtime

Unknown

What happened

2026-10-18
An attacker exploited a program flaw in Unicolle and took member data. [1]
2026-10-22
THS Inc. stopped the affected program, blocked outside access and closed the site from the early hours. [1] [2]
2026-11-05
After fixes and a security assessment by an outside firm, it reopened the site and disclosed the leak the same day. [1] [2]

Impact

Up to 19,468 people who were members on 18 October are affected. The data covers names with readings, member IDs, email addresses, birth dates, phone numbers, postcodes, addresses, newsletter subscriptions, company names, individual or corporate status, industry and employer, depending on the member. Passwords and card data were not leaked, and former members are not included. [1]

Affected members were emailed individually and the PPC was notified. After reopening, new one-point embroidery and custom-size orders and the favorites feature remain suspended. [1] [2]