Sephora customers' data allegedly being peddled on Dark Web

Cyber security firm says over three million records of customers being offered for sale

Singapore-based cyber security firm Group-IB said the Sephora customer records offered for sale on the Dark Web had information such as customers' login details, their date of registration and last activity, as well as gender, full names and ethnicit
Singapore-based cyber security firm Group-IB said the Sephora customer records offered for sale on the Dark Web had information such as customers' login details, their date of registration and last activity, as well as gender, full names and ethnicity. There were also details of hair concerns and skincare routines. ST PHOTO: KUA CHEE SIONG
New: Gift this subscriber-only story to your friends and family

More than three million records of customers of international beauty retailer Sephora are allegedly being peddled on the Dark Web, a leading cyber security firm said yesterday.

In response to queries from The Straits Times, Singapore-based Group-IB said the sale involves two databases containing records from February and March this year.

Already a subscriber? 

Read the full story and more at $9.90/month

Get exclusive reports and insights with more than 500 subscriber-only articles every month

Unlock these benefits

  • All subscriber-only content on ST app and straitstimes.com

  • Easy access any time via ST app on 1 mobile device

  • E-paper with 2-week archive so you won't miss out on content that matters to you

Join ST's Telegram channel and get the latest breaking news delivered to you.

A version of this article appeared in the print edition of The Straits Times on August 02, 2019, with the headline Sephora customers' data allegedly being peddled on Dark Web. Subscribe