US clothing megastore hacked, millions affected

CEO limits online apology to US customers.

A large US online shoe and clothing retailer has admitted hackers made of with personal details of millions of customers.

Attackers hacked a server in Kentucky and grabbed databases with names, phone numbers, email addresses and hashed passwords - but not credit card or payment data.

Chief executive officer Tony Hsieh said in an internal email republished online but banned to international visitors, that Zappos.com had reset passwords for all 24 million customers and would email them to advise of the incident.

"...we will begin the process of notifying the 24+ million customer accounts in our database about the incident and help step them through the process of choosing a new password for their accounts," Hsieh said.

He advised customers to change passwords of all accounts that share their Zappos password.

The company shut off telephone lines and reverted solely to email in anticipation of a deluge of customer calls.

Amazon bought Zappos for US$1.2 billion in 2009. Amazon accounts were not affected.

A copy of the internal email sent to staff and customers is available on Pastebin.com (http://pastebin.com/9hrp7U7x).

Copyright © SC Magazine, Australia

US clothing megastore hacked, millions affected
Company/Organisation
Technology

What are your thoughts on this article? Add your comment below.

To begin commenting right away, you can log in below or register an account if you don't yet have one. Please read our guidelines on commenting. Offending posts will be removed and your access may be suspended. Abusive or obscene language will not be tolerated. The comments below do not necessarily reflect the views or opinions of SC Magazine, Haymarket Media or its employees.

NOTE: You must be a registered member of SC Magazine to post a comment.

Click here to login | Click here to register
comments powered by Disqus
Sign up to receive SC Magazine email newsletters
   FOLLOW US...
Most Read