Raven Hengelsport Data Breach Exposes 18GB of Customer Data

This article has been indexed from E Hacking News – Latest Hacker News and IT Security News

 

The cybersecurity researchers from Safety Detectives uncovered an insecure Microsoft Azure Blob storage server linked to the Raven Hengelsport retail outlet (also called Raven Fishing B.V.), with PIIs presumably accessible for malicious hackers belonging to hundreds of thousands of consumers. 
Headquartered in Dronten, Netherlands is Raven Hengelsport, engaged in fishing gear and equipment. While online offering Raven.nl offers a wide choice of products, the corporation has many significant shops in the Netherlands and across Europe. 
In early March, the cybersecurity branch of antivirus screening site SafetyDetectives found the unsecured Azure Blob Storage Server with 18 GB of company data spanning at least 246,000 users in over 450,000 entries. Raven provides its clients across the Netherlands and Europe with a large variety of products in the retail industry. The website of Raven.nl works as a fishing supermarket to provide everything from conventional goods such as rods, rollers, and tackle boxes to more comprehensive merchandise such as tents, boats, and articles of clothing. 
“These files contained records that consisted of two different data sets, order details, and logs of PII, both of which expose the sensitive personal information of Raven’s customers,” the company’s write-up this week explained. 
Raven.nl Order Details — include customer identifiers, delivery information, rebates, shipping charges, transactions, and tracking numbers of shipments. Customer PII [Personally Identified Information] – names, surnames, residenc

[…]
Content was cut in order to protect the source.Please visit the source for the rest of the article.

Read the original article: Raven Hengelsport Data Breach Exposes 18GB of Customer Data