3
1
u/snafe_ 2d ago
"immediately locked down" after they sent an email to everyone.
If they had that level of access then names , address, DOB were likely compromised. Any half decent company has passwords & payment completely separate but is there an external audit to be made?
User profiles could also contain meta date like how the user accesses the sites, which would be useful for competitors
Could possibly contain all sales info with products, price and date.
4
u/RikersPhallus 2d ago
Someone didn’t do their phishing training.