StockX was hacked, exposing millions of customers' data

[InfoSec News <alerts () infosecnews org>]

https://techcrunch.com/2019/08/03/stockx-hacked-millions-records/

By Zack Whittaker
TechCrunch
August 3, 2019

It wasn’t “system updates” as it claimed. StockX was mopping up after a data 
breach, TechCrunch can confirm.

The fashion and sneaker trading platform pushed out a password reset email to 
its users on Thursday citing “system updates,” but left users confused and 
scrambling for answers. StockX told users that the email was legitimate and not 
a phishing email as some had suspected, but did not say what caused the alleged 
system update or why there was no prior warning.

A spokesperson eventually told TechCrunch that the company was “alerted to 
suspicious activity” on its site but declined to comment further.

But that wasn’t the whole truth.

An unnamed data breached seller contacted TechCrunch claiming more than 6.8 
million records were stolen from the site in May by a hacker. The seller 
declined to say how they obtained the data.

[...]

--
Subscribe to InfoSec News
https://www.infosecnews.org/subscribe-to-infosec-news/
https://twitter.com/infosecnews_