Science & Tech · Cybersecurity · 7 hrs ago
Ricardo users receive phishing messages after data leak
Ricardo, a Swiss online marketplace, says a security breach exposed personal details linked to about 890,000 user accounts.
The exposed information included names, postal addresses and phone numbers, but Ricardo says email addresses, passwords and other personal data were not affected.
Some users have since received WhatsApp messages that use correct details and claim there is suspicious activity on a Ricardo transaction.
The messages include links to fake websites that could give scammers access to account information if users enter their details.
It has not been confirmed that the messages use information from the breach, though the timing has raised concern.
Ricardo says it does not ask customers to share sensitive information by WhatsApp or SMS and advises them not to open suspicious links.
The company says it closed the security gap within hours and plans to file a criminal complaint.
Ricardo is warning customers about WhatsApp phishing messages sent after a data breach exposed information linked to about 890,000 user accounts.
The messages use correct personal details and claim there has been suspicious activity on a Ricardo transaction.
Their links lead to fake websites where entering account details could give scammers access to them.
Ricardo says email addresses, passwords and other personal data were not affected by the breach.
The company says it does not ask customers to provide sensitive information by WhatsApp or SMS.
- Who
- Ricardo customers are receiving the messages; the senders are unidentified scammers.
- What
- Scammers are sending WhatsApp phishing messages using customers’ personal details and fake links.
- When
- The messages were reported after Ricardo detected suspicious server activity the previous Wednesday.
- Where
- The messages are sent via WhatsApp to Ricardo customers.
- Why
- The messages appear intended to trick recipients into entering account information; whether their details came from the breach is not confirmed.
This story does not have two clearly opposing sides.
E-mail addresses, passwords and other personal data were not affected by the attack.
for targeted fraud attempts
Ricardo detected unusual activity on its servers.
Ricardo says it closed the security vulnerability.
CEO Francesco Vass emailed affected customers about the breach.
Customers reported suspicious WhatsApp messages using accurate personal details.
- Accounts affected
- Around 890,000
- Exposed information
- Names, postal addresses and telephone numbers
- Communication channel
- Security response
- Ricardo says it closed the vulnerability within a few hours
- Customer warning
- Ricardo says it does not ask for sensitive information by WhatsApp or SMS
Sources
Related news
Cyberattack defrosts refrigerators at French supermarket chains
Ledger confirms tampered wallets linked to CryptoBilis fund thefts
Malware incident at contractor may expose 8.7 million karaoke records
Critical SonicWall flaw faces exploitation days after patch
Cyberattack disrupts refrigeration systems at French supermarkets
Canadian cybersecurity executive arrested on federal extortion charges
Albert Heijn systems remain offline after cybersecurity incident
Attacks disrupt Yandex services and its data centers in Russia
Canadian cybersecurity executive arrested in FBI ShinyHunters investigation
Cyberattacks disrupt French supermarket freezers and Dutch-Belgian retail operations
Exposure management shifts cybersecurity focus from controls to risk
