Data of 300k digiDirect customers leaked in suspected attack

Sensitive customer data is at risk

In a BreachForum post, the threat actor said the stolen data contained customers’ sensitive personal information, including full names, email addresses, phone numbers, company information, zip codes, street addresses, country and state information, and date of birth.

Additionally, additional postings, sensitive payment information including billing and shipping address, payment terms “first” and “last,” and AIPP verification status, were also part of the dump.

Victims of such identity theft can face cyber threats including identity theft, phishing, targeted phishing, and account takeover (ATO) attacks. Compromised payment information can be used for fraudulent purchases, fake identity theft, and shipping fraud.