A threat actor claims to have obtained and is now offering for sale the user database and order records of Netshoes, one of Brazil’s largest e-commerce companies specializing in sports goods. Founded in 2000, Netshoes has grown significantly, making this breach particularly impactful.
The data breach reportedly dates back to July 2024 and includes personal information of 38 million users such as SSNs, phone numbers, full addresses, names, and detailed order information from 2015 to 2024, including order dates, numbers, statuses, estimated deliveries, and partner suppliers.
The threat actor is offering this data for a one-time sale, pricing it at $500,000 USD, payable in BTC or XMR. They have also provided a sample file in CSV/XLSX format for potential buyers. Authorities and Netshoes are investigating the validity and extent of this claim.
The post Threat Actor Claims to Sell Customer Data of Netshoes appeared first on Daily Dark Web.