Zalora refutes claims that 400k shoppers' data was sold; some 1.5m records allegedly at risk

In a Facebook post early Wednesday morning, satirical group SMRT Ltd (Feedback) claimed that the personal data of 400,000 customers from Zalora, 440,000 customers from Reebonz and 650,000 records from Deal.com.sg were being peddled. -- SCREENGRAB: ZA
In a Facebook post early Wednesday morning, satirical group SMRT Ltd (Feedback) claimed that the personal data of 400,000 customers from Zalora, 440,000 customers from Reebonz and 650,000 records from Deal.com.sg were being peddled. -- SCREENGRAB: ZALORA.SG

SINGAPORE - Online fashion retailer Zalora has refuted claims that its customer database was sold in what is a breach of personal data protection laws here.

In a Facebook post early Wednesday morning, satirical group SMRT Ltd (Feedback) claimed that the personal data of 400,000 customers from Zalora, 440,000 customers from Reebonz and 650,000 records from Deal.com.sg - totaling 1.5 million customers - were being peddled.

The satirical group set up in 2011, which started out mocking the breakdowns and disruptions on public transport, posted what appeared to be an e-mail from someone soliciting the sale of some 900,000 e-mail addresses of Zalora customers.

It also posted a blurred screen grab of a customer list comprising their names, addresses, e-mail addresses and phone numbers.

But when contacted, online retailer Zalora refuted the allegation.

"Zalora is aware that there is a claim circulating on the Internet that someone got hold of the Zalora customer database and that this database is now being sold in the market. We've checked our database log and information and we confirm that the screen-grabbed database that is posted is not our database," its spokesman said.

The online retailer assured online shoppers that its database is secured behind several layers of access control, with detailed audit logs for monitoring.

It added: "Our customer database is extremely secure and has never been sold, monetised or shared with third parties."

itham@sph.com.sg