Breach Disclosure: Short Édition

In June 2021, France-based publishing company, Short Édition, was the victim of a data breach that resulted in the compromise of approximately 505 thousand records. The information involved in the breach included names, email addresses, mailing addresses, and salted SHA-1 or SHA-512 password hashes.

Standing Intelligence Requirements

PII & Fraud

For the most up to date list of ZeroFOX Threat Research’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/alpha_team/advisories/14956

Recommendations

Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks.
If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance.
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account.
Review network logs for potential signs of compromise and data egress.
Enforce administrative or application control restrictions to prevent unauthorized installation of software or media.

Details

On June 26, 2021, Short Édition suffered a data breach in which the following types of data were compromised:

Names
Usernames
Email addresses
Mailing addresses
Phone numbers
Date of birth
Gender
Salted SHA-1 or SHA-512 password hashes

The breach occurred when Short Édition's hosting servers were the target of a large-scale cyberattack. The company took the website down and immediately began working with law enforcement and cybersecurity experts to investigate the incident. Short Édition recommends that all website users change their account passwords as a precaution.