Goodwill claims it was hit by data breach

Goodwill claims it was hit past data breach

(Image credit: Shutterstock)

American nonprofit Goodwill has suffered a data breach that is affecting the users of its ShopGoodwill.com eastward-commerce sale platform.

Reports say the company's platform has had an exploitable vulnerability which malicious actors abused to make abroad with the full names, email addresses, phone numbers, and mailing addresses of its users.

Information technology's not known exactly how many customers were affected past the alienation, simply GoodWill says information technology has patched upwardly the vulnerability.

Making use of stolen data

In a notification letter, which the company'southward Vice President Ryan Smith sent out to afflicted customers, information technology was said that cyberattackers did non access any accounts, and that no financial data was taken.

"We were recently alerted to an outcome on our website which resulted in the exposure of some of your personal contact information to an unauthorized third political party," Smith said.

"No payment card information was exposed; ShopGoodwill does non store payment card information. While the third party accessed buyer contact information, they did not admission your ShopGoodwill account."

While stealing names, email addresses, phone numbers and mailing addresses may non seem similar much, for cybercrooks - it's plenty. This information tin be used in identity theft, allowing malicious actors to pose online equally their victims, and to either steal more sensitive information elsewhere, or to use this information in a phishing assault.

This data is too useful in password cracking, as many people use things like nascence dates, or concrete addresses, as their passwords. It can be as well used in credential stuffing, every bit consumers oftentimes use the same login information across numerous services.

The nonprofit helps people with disabilities worldwide and has, according to BleepingComputer, helped 230,000 individuals find a task in 2019. Its funding comes from the sales of donated goods, which can be purchased either in thrift shops around the world, or on the ShopGoodwill.com online auction site.