DEphoto Data Breach Affects Nearly 556,000 Customers
/ 1 min read
📸💔 DEphoto suffers major data breach, exposing personal information of nearly 556,000 customers. The U.K. photography business DEphoto was hacked on December 25, resulting in the theft of personal data from 555,952 customers, including detailed information from 429,597 orders and over 16,000 plain text credit card records. The attacker, known as 0mid16B, claims to have exfiltrated hundreds of gigabytes of data, including sensitive photographs. After allegedly failing to secure their system post-breach, DEphoto was attacked again on December 29. The hacker demanded a ransom of £50,000, which went unanswered. Following the breach, DEphoto began notifying affected customers, raising concerns about their data retention practices. 0mid16B plans to sell the customer database and leak additional data.
