Data from 24 Million Zappos Accounts Compromised

If you’ve ver purchased anything from online retailer Zappos, it’s probably time to change your password. Why? Well, on Sunday the company confirmed that someone (or someones) breached the company’s servers and accessed personal data belonging to about 24 Million of its customers.

The company, which is owned by Amazon and mostly known for shoes, confirmed that intruders were able to gain access to sensitive data including user names, encrypted passwords, customer names, email addresses, phone numbers and the last four digits of credit card numbers.

The company insisted that full credit card numbers were not compromised, but it’s probably not a bad idea to keep an eye on your next couple statements just to be on the safe side. that way, if you see something weird, you can report it and take care of the situation quickly.

The company also said in an email to customers that it had reset the passwords of all compromised accounts. The full text of the email can be read after the jump.

First, the bad news:

We are writing to let you know that there may have been illegal and unauthorized access to some of your customer account information on Zappos.com, including one or more of the following: your name, e-mail address, billing and shipping addresses, phone number, the last four digits of your credit card number (the standard information you find on receipts), and/or your cryptographically scrambled password (but not your actual password).

THE BETTER NEWS:

The database that stores your critical credit card and other payment data was NOT affected or accessed.

SECURITY PRECAUTIONS:

For your protection and to prevent unauthorized access, we have expired and reset your password so you can create a new password. Please follow the instructions below to create a new password.

We also recommend that you change your password on any other web site where you use the same or a similar password. As always, please remember that Zappos.com will never ask you for personal or account information in an e-mail. Please exercise caution if you receive any emails or phone calls that ask for personal information or direct you to a web site where you are asked to provide personal information.

PLEASE CREATE A NEW PASSWORD:

We have expired and reset your password so you can create a new password. Please create a new password by visiting Zappos.com and clicking on the “Create a New Password” link in the upper right corner of the web site and follow the steps from there.

We sincerely apologize for any inconvenience this may cause. If you have any additional questions about this process, please email us at passwordchange@zappos.com.

    %d bloggers like this: