Vinomofo latest retailer to suffer data breach

Coming only days after a similar data breach suffered by online marketplace MyDeal, Vinomofo has fallen prey to a cyber attack in which the retailer says “an unauthorised third party unlawfully accessed our database on a testing platform that is not linked to our live Vinomofo website”.

Despite the database existing on a testing platform separate to Vinomofo’s primary online storefront, it is understood that customer details were nonetheless accessed, with Vinomofo flagging that the customer information potentially exposed in the breach includes “name, gender, date of birth, address, email address and phone number”.

The retailer also suggested in its statement emailed to customers on Monday night, “our cyber security and forensic specialists have assessed that the risk to our customers and members by this information being accessed is low”.

A post made to an online forum by a user purporting to be behind the breach and seeking to sell the exposed data suggests the attack made to Vinomofo’s database may have occurred days before customers were notified, with the post marked as being published on Saturday October 15. The post further included samples of the data it claims to have retrieved via the breach, which includes visible details including email addresses, names, dates of birth and phone numbers.

Screenshot of a forum post purported to be from the individual responsible for Vinomofo’s latest data breach.

“Working with our IT experts, we have taken steps to further bolster the security of our technology systems to help prevent any similar incidents happening again,” Vinomofo wrote in its statement, “We are contacting you directly so you can take simple, precautionary steps to protect your information and avoid any potential scams.”

“We advise that you remain alert to any increased scam activity – especially email, SMS or telephone phishing scams – with fraudulent communications disguised to look like they come from an organisation you trust.”

The breach suffered by Vinomofo continues the trend of increased risk and instances of cyber threats and attacks to retailers worldwide, as cybersecurity experts continue to warn retailers to build their vigilance and seek to better safeguard themselves and their customers against potential future cyber attacks.

The full response from Vinomofo to its data breach remains ongoing.

The e-commerce landscape is changing. With a Power Retail Switched On membership, you get access to current e-commerce revenue and forecasting, traffic levels, average conversion rate, payment preferences and more!