retail breaches
-
Loblaw notifies customers after breach exposes names and contact details
Loblaw notified customers this week that a breach of a contained part of its IT network exposed names phone numbers and email addresses. The company logged customers out and there was no evidence that financial or health data were accessed.
-
Researchers warn ‘Jingle Thief’ group exploits cloud access to commit gift card fraud
Palo Alto Networks Unit 42 says a group called Jingle Thief is targeting cloud environments used by retailers to steal credentials, issue unauthorized gift cards and resell them on gray markets, using phishing, long‑term access and identity misuse to evade detection.
-
Muji halts online sales in Japan after ransomware attack on logistics partner Askul
Muji took its online store offline in Japan after a ransomware attack at logistics partner Askul disrupted orders and shipping; Askul said it suspended operations while investigating possible data leakage, and Muji is notifying affected customers.
-
Hacking Group ‘Scattered Spider’ Shifts Focus to U.S. Retailers Following UK Breaches
Google has identified a hacking group known as ‘Scattered Spider’ that is now targeting U.S. retailers after successfully breaching UK retailer Marks & Spencer. This group’s focus on high-value targets and their aggressive tactics pose significant risks to the retail sector.
