HIBP Confirms 587,000 Zadig & Voltaire Customers Breached

Today, Have I Been Pwned (HIBP) added data from a breach at the French fashion brand Zadig & Voltaire to its database. The breach, initially disclosed on a popular hacking forum, exposed the sensitive information of nearly 587,000 individuals.

The breach was first publicly posted on June 5, 2024, by a user named Tanaka on BreachForums. Tanaka, a high-profile member of the forum, revealed that the compromised data included names, email addresses, physical addresses, phone numbers, and genders. This information, extracted from Zadig & Voltaire's customer database, was formatted in a CSV file dated November 16, 2023.

The forum post by Tanaka included sample data entries showcasing the types of information that were compromised. The samples revealed detailed personal information such as:

• Full names
• Email addresses
• Genders
• Dates of birth
• Physical addresses

These samples provided a glimpse into the vast dataset, which contained 638,726 rows of customer information. To access the complete dataset, forum users could unlock the full content for a few credits, a small cost typically used for transactions on the platform.

Upon contact, Zadig & Voltaire confirmed the breach had occurred more than six months prior and stated that they had taken all necessary measures promptly. The company, known for its luxury fashion products, operates both online and in physical stores across the globe. With its head office in Paris, Zadig & Voltaire is renowned for its edgy, rock-and-roll-inspired apparel and accessories.

The addition of this breach to HIBP‘s database serves as a crucial alert to affected individuals. Given the nature of the exposed data, impacted customers should be vigilant about potential phishing attacks and identity theft.

Recommended actions for potentially exposed users include:

• Regularly check bank and credit card statements for unauthorized transactions.
• Update passwords for any accounts associated with the compromised email addresses.
• Add an extra layer of security to online accounts by enabling two-factor authentication (2FA).
• Avoid clicking on links or downloading attachments from unknown senders.