14 DAY TRIAL // The website of the sportswear and casual clothing manufacturer Billabong has been hacked by the WikiBoat collective as part of its WikiBoatWednesday operation. The hackers published the email addresses, users IDs and clear text passwords of over 20,000 users.
According to the hackers, they obtained a total of 35,000 account details, but we were able to locate only around 20,000 of them.
However, in the data dump we’ve found, the email addresses are in alphabetical order and they suddenly stop at the letter “m.” This indicates that the number mentioned by the hackers may be valid.
Billabong has confirmed the breach and shut down its official website while the incident is being investigated.
“At this stage, we understand that the customer database contains personal information of certain customers of the website, but no financial data. We view this attack as an extremely serious matter and have taken urgent action to contain the incident and prevent further attacks occurring,” a company representative told SC Magazine.
“We are continuing to gather information about the incident and to establish the extent and nature of the data that may have been accessed. We will take further appropriate measures as new information comes to light.”
After a period of time in which things were rather quiet on the hacking scene, this week we witnessed a number of important data breaches that exposed millions of users worldwide.
It started with social media network Formspring and continued with AndroidForums.com and Yahoo!. Today we’ve learned that even NVIDIA was forced to shut down its forums as a result of a breach.
Furthermore, tens of thousands of sites may have been compromised by cybercriminals who leveraged a zero-day vulnerability present in Parallels’ Plesk Panel.