Gecko Custom Customer and Order Data Allegedly Advertised on Cybercrime Forum
Summary
A cybercrime forum post reportedly advertised data linked to Gecko Custom: 668,000 order rows and 572,000 customer rows, including contact, address, and transaction details. The alleged exposure is unconfirmed.
Key points
- A database linked to Gecko Custom was reportedly advertised on a cybercrime forum; the article does not independently verify the claim.
- The advertised datasets reportedly contain 668,000 order rows and 572,000 customer rows.
- Claimed customer data includes names, email addresses, phone numbers, and physical addresses.
- The data reportedly includes the last four digits of payment cards, transaction IDs and amounts, and customer spending and order counts.
- Users in the United Kingdom, United States, and Canada are said to be primarily affected.
Article Details
- Victim Organization
- Gecko Custom
- Incident Type
- Alleged data breach; a database linked to Gecko Custom was advertised on a cybercrime forum.
- Data Types Exposed
- Customer full names
- Email addresses
- Phone numbers
- Physical addresses
- Last four digits of payment cards
- Transaction IDs
- Transaction amounts
- Total customer spend
- Order counts
- UTM tracking sources
- Country-specific user segments
- Affected Records
- 1,240,000 rows across two advertised datasets: 668,000 order rows and 572,000 customer rows. Whether the datasets overlap is not stated.
- Operational Impact
- Not disclosed.
- Ransom Or Extortion
- A database was advertised on a cybercrime forum. No ransom demand or extortion activity is reported.
- Claim Status
- claimed
Countries
CanadaThe exposed records reportedly affect users primarily in the United Kingdom, the United States, and Canada and include customer full names, email addresses, phone numbers, physical addresses, partial payment cardUnited KingdomThe exposed records reportedly affect users primarily in the United Kingdom, the United States, and Canada and include customer full names, email addresses, phone numbers, physical addresses, partial payment cardUnited StatesThe exposed records reportedly affect users primarily in the United Kingdom, the United States, and Canada and include customer full names, email addresses, phone numbers, physical addresses, partial payment card