Connect with us

Headlines

Retail Jewelry Giant’s Customer Data Was Exposed in Leak

The problem has since been fixed.

mm

Published

on

Order information for customers of some Signet brands may have been exposed in a leak, KrebsOnSecurity reports.

A customer reported the security weakness to the security-focused publication. The customer, Brandon Sheehy of Dallas, “discovered that slightly modifying the link in the confirmation email he received and pasting that into a Web browser revealed another customer’s order.” That included a variety of personal information, including name, address and last four digits of credit card.

Video: Don’t Be Afraid to Run Multiple Jewelry Marketing Promotions at Once
Jim Ackerman

Video: Don’t Be Afraid to Run Multiple Jewelry Marketing Promotions at Once

Video: How to Spend Your Jewelry-Business Advertising Budget the Right Way
Jim Ackerman

Video: How to Spend Your Jewelry-Business Advertising Budget the Right Way

Video: Gene the Jeweler Talks About the Challenges of Family Life
Gene the Jeweler

Video: Gene the Jeweler Talks About the Challenges of Family Life

“My first thought was they could track a package of jewelry to someone’s door and swipe it off their doorstep,” Sheehy told KrebsOnSecurity. A variety of other scams might be possible with the information, he surmised.

Sheehy said he contacted Signet, whose brands include Jared, Kay and Zales, about the problem. It was then apparently fixed for all orders going forward, but not for past orders.

Scott Lancaster, chief information security officer or Signet, said the problem has now been fixed for past orders as well.

The issue “affected only orders made online through jared.com and kay.com” and not the company’s other brands, KrebsOnSecurity reports.

Advertisement

Read more at KrebsOnSecurity

Advertisement

SPONSORED VIDEO

Wilkerson Testimonials

Wilkerson Helped This Jeweler to Navigate His Retirement Sale Despite a Pandemic

Hosting a going-out-of-business sale when the coronavirus pandemic hit wasn’t a part of Bob Smith’s game plan for his retirement. Smith, the owner of E.M. Smith Jewelers in Chillicothe, Ohio, says the governor closed the state mid-way through. But Smith chose Wilkerson, and Wilkerson handled it like a champ, says Smith. And when it was time for the state to reopen, the sale continued like nothing had ever happened. “I’d recommend Wilkerson,” he says. “They do business the way we do business.”

Promoted Headlines

Most Popular