Shadow silent on data breach as hacked data appears genuine
Reading Time: < 1 minutesIn an email sent to affected customers this week, Paris-based Shadow said that a hacker carried out an ‘advanced social engineering attack’ against one of its employees that allowed access to customers’ private data. In the email, Shadow CEO Eric Sèle said this includes full names, email addresses, dates of birth, billing addresses and credit card expiry dates.
Of the data we’ve seen, many of the customer billing addresses correspond with private home addresses. The dataset we have seen also includes private API keys that correspond with customer accounts, though it’s unclear if these keys are accessible by customers. The dataset also includes non-personal information related to customer accounts, such as subscription status and whether accounts have been ‘blacklisted.’
The most recent record in the stolen data suggests that Shadow was breached on or shortly after September 28. In an email sent to those affected by the incident, which has not yet been published on Shadow’s website or shared on the company’s social media channels, Shadow said it was hacked ‘at the end of September’ after an employee downloaded a malware-laced Steam game via Discord.
Shadow spokesperson Thomas Beaufils would not comment when emailed Friday, but did not dispute the findings. It’s not known if Shadow informed France’s data protection regulator, CNIL, of the breach as required under European law. A spokesperson for CNIL did not immediately return a request for comment.
Zack Whittaker contributed reporting.
Reference: https://techcrunch.com/2023/10/13/shadow-data-breach-hacked/
Ref: techcrunch
MediaDownloader.net -> Free Online Video Downloader, Download Any Video From YouTube, VK, Vimeo, Twitter, Twitch, Tumblr, Tiktok, Telegram, TED, Streamable, Soundcloud, Snapchat, Share, Rumble, Reddit, PuhuTV, Pinterest, Periscope, Ok.ru, MxTakatak, Mixcloud, Mashable, LinkedIn, Likee, Kwai, Izlesene, Instagram, Imgur, IMDB, Ifunny, Gaana, Flickr, Febspot, Facebook, ESPN, Douyin, Dailymotion, Buzzfeed, BluTV, Blogger, Bitchute, Bilibili, Bandcamp, Akıllı, 9GAG