Kylie Jenner’s makeup company has notified their customers that their information may have been compromised in a security incident at a Canadian e-commerce merchant that was detected recently.
Last month, two employees of Shopify were involved in a theft of transactional records belonging to up to 200 of the company’s merchants. The incident is now being investigated by the FBI and the alleged two employees no longer have access to the company’s network.
Kylie Cosmetics are notifying their clients that their personal data might be included in the data that has been wiped by the two employees.
The details affected by the breach includes contact details such as email, name and address, and order details, like products and services purchased.
The email notification sent by the company states that they value their customers and that they are working hard with Shopify to get additional information about the incident.
The company also stated that Shopify had assured its merchants that they have implemented additional controls in order to prevent this type of incident from happening in the future.
Jenner, the 23-year-old billionaire launched the company three years ago. Shopify was founded in 2006 and is used by more than million merchants around the world.
Insider threat is a very serious issue when it comes to cyber security but it is not given much attention. A threat actor who wishes to get company data can fake an identity and get a job, after which they can collect the data.
Image Credits : Adweek