FutureShop Egypt allegedly breached through unauthenticated API, exposing customer and order data
Summary
A threat actor claims an unauthenticated API exposed FutureShop Egypt customer profiles, order histories, delivery locations, and admin-panel data. The reported dump includes 3,893 customer records and 5,181 order records; the claim is unverified.
Key points
- A threat actor claims FutureShop Egypt was breached through an exposed API without authentication; the article provides no independent confirmation.
- The alleged dump contains 3,893 customer records and 5,181 order records.
- Reportedly exposed information includes delivery addresses, GPS coordinates, and other location details.
- The dump allegedly includes admin-panel data for 643 active store orders.
- Named stores associated with the reported data include Hyper Market, Khodrawat Super Tawfeer, Zad Land, Muluk Al Kebda, and Al Sajq.
Article Details
- Victim Organization
- FutureShop Egypt
- Victim Domain
- Not disclosed
- Incident Type
- Alleged data breach through an exposed API with no authentication
- Data Types Exposed
- Customer profiles
- Order histories
- Delivery addresses
- GPS coordinates
- Detailed location data
- Admin panel data
- Affected Records
- The claimed dump includes 3,893 customer records, 5,181 order records, and admin panel data for 643 active store orders; the source does not clarify whether these counts overlap.
- Affected Data Size
- Unknown
- Operational Impact
- Unknown
- Ransom Or Extortion
- Unknown
- Claim Status
- claimed