January 11, 2024 at 03:28PM
Popular athleisure clothing brand Halara is investigating a data breach after the alleged leak of almost 950,000 customers’ data on a hacking forum. The Hong Kong-based company, known for its TikTok promotions, is working to address the situation. The leaked data is said to contain personal information, prompting concerns about potential targeted attacks on customers.
Key Takeaways from Meeting Notes:
1. Athleisure clothing brand Halara is investigating a significant data breach involving the alleged leak of data of almost 950,000 customers on a hacking forum.
2. The company, founded in 2020, gained popularity through promotional videos on TikTok.
3. Halara is aware of the alleged data theft and is currently investigating the potential breach.
4. The data breach was claimed by an individual named ‘Sanggiero,’ who shared stolen customer data on a hacking forum and a Telegram channel.
5. It is reported that the leaked data contains over 941,910 records, including sensitive customer information like names, phone numbers, addresses, and more.
6. The breach occurred due to the exploitation of a bug in an API on Halara’s website, as stated by Sanggiero.
7. There is a warning for Halara customers about the possibility of targeted smishing attacks to steal additional information, which can be used for fraudulent activities or sold to other threat actors.
8. It is noted that the forum post about the data breach contains an incorrect logo for Halara, using one for a cannabis company that was not breached.
9. BleepingComputer has verified the authenticity of the leaked data by contacting multiple individuals listed in the file.
These takeaways summarize the crucial details and implications of the data breach for Halara and its customers, as well as the potential risks associated with the leaked information.