ENKR

eTomato member data leak via affiliate sites' login pages

Add to my breach check

Made public

What leaked4

Hard to replace

  • Mobile number
  • Home or delivery address
  • Email address

Permanent

  • Full name
  • Mobile numberused as the member ID
  • Home or delivery addresswith postcode; only members who entered an address at sign-up
  • Full namename or nickname

To-dos4 · about 45 min in all

  1. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: scam calls, phishing messages
  2. Register as an exposed person with the FSSabout 10 minLimits harm from: scam calls (opens in a new tab)
  3. Block new loans and cards in your nameabout 10 minLimits harm from: scam calls (opens in a new tab)
  4. Remove your address and phone from public profiles and tighten SNS privacyabout 20 minfreeLimits harm from: visits or contact at home

What happened next4 events

  1. Undetected 2 events113 days · show events
  2. Response 2 eventsNotice in 3 days · show events
  3. RemedyNone on record
  4. PenaltyNone on record
  5. DisputesNone on record
  1. Notified members of the leak and asked them to change passwords and watch for impersonation messages · press
  2. Posted an urgent notice of the member data leak on its website
  3. Confirmed that an outside hacker had accessed the personal data database through a website flaw and leaked member data · press, citing the company notice
  4. Intrusion began
Company
eTomato
When it happened
–
Company detected it
Made public
Notice
Leak confirmed
Affected
unknown; eTomato members; the company gave no count · press

Sources