Ricardo Reports Personal Data Breach Affecting About 890,000 Accounts
Summary
Unbefugte accessed personal data linked to about 890,000 Ricardo accounts, including names, addresses and phone numbers. Ricardo says the flaw is fixed, passwords and email addresses were not affected, and users are being notified.
Key points
- Ricardo detected suspicious server activity on October 7 and found unauthorized access to personal data linked to orders.
- About 890,000 accounts were affected; exposed data included names, postal addresses and phone numbers. Business accounts may also have exposed company names.
- Email addresses and passwords were not affected, and the data was not publicly accessible, according to the company.
- Ricardo says it has fixed the security flaw that enabled the access.
- The company plans to file a criminal complaint against unknown perpetrators; no ransom demand or extortion has been reported.
- Affected users are being notified and warned to be cautious of unexpected messages or calls requesting sensitive financial or login information.
- The Swiss data-protection authority has been notified, and the incident is to be reported to the national cybersecurity office.
Article Details
- Victim Organization
- Ricardo
- Incident Type
- Unauthorized access to personal data (data breach)
- Data Types Exposed
- Names
- Postal addresses
- Telephone numbers
- Company names for business customers
- Affected Records
- Approximately 890,000 user accounts
- Operational Impact
- Ricardo detected suspicious activity on its servers on October 7 and closed the vulnerability. The vulnerability has since been fully remediated.
- Ransom Or Extortion
- The company stated that the incident had not resulted in extortion or ransom demands.
- Claim Status
- confirmed