Breach Disclosure: WiziShop

The French e-commerce platform WiziShop experienced a data breach on July 14th 2020, which exposed 18GB of data including names, phone numbers, birthdates, physical and IP Addresses, and SHA-1 password hashes. WiziShop acknowledged this breach on Twitter and stated they communicated this breach with their clients and reported through the appropriate means.

Recommendations

Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account

Details

While this breach impacted around 3 million unique email addresses, there is very little information out there about this breach at this time. The ZeroFOX Alpha Team has researched various forums and marketplaces for actors selling this data, however, there has been no mention of this breach being for sale on many of the popular hacking forums.