Skip to content
Data breachResolved

Romwe data breach (2018)

In mid-2018, the Hong Kong-based retailer Romwe suffered a data breach which exposed almost 20 million customers. The data was subsequently sold online and includes names, phone numbers, email and IP addresses, customer geographic locations and passwords stored as salted SHA-1 hashes.

Victim
Romwe
records
19.5M
SectorFinance

Imported from Have I Been Pwned — pending editorial review and translation to French. The summary below is machine-extracted; consult the source for details.

In 2018-06-01, Romwe was affected by a data breach. Approximately 19,531,820 accounts were exposed. In mid-2018, the Hong Kong-based retailer Romwe suffered a data breach which exposed almost 20 million customers. The data was subsequently sold online and includes names, phone numbers, email and IP addresses, customer geographic locations and passwords stored as salted SHA-1 hashes.

Sources

  1. haveibeenpwned.comhttps://haveibeenpwned.com/PwnedWebsites#Romwe
  2. romwe.comhttps://romwe.com

Related incidents

Data breachResolved

Roll20 data breach (2018)

In December 2018, the tabletop role-playing games website Roll20 suffered a data breach. Almost 4 million customers were impacted by the breach and had email and IP addresses, names, bcrypt hashes of passwords and the last 4 digits of credit cards exposed.

Victim
Roll20
Records
4.0M
Data breachResolved

GoldSilver data breach (2018)

In October 2018, the bullion education and dealer services site GoldSilver suffered a data breach that exposed 243k unique email addresses spanning customers and mailing list subscribers.

Victim
GoldSilver
Records
242.7K
Data breachResolved

Atlas Quantum data breach (2018)

In August 2018, the cryptocurrency investment platform Atlas Quantum suffered a data breach. The breach leaked the personal data of 261k investors on the platform including their names, phone numbers, email addresses and account balances.

Victim
Atlas Quantum
Records
261.5K
Data breachResolved

Apollo data breach (2018)

In July 2018, the sales engagement startup Apollo left a database containing billions of data points publicly exposed without a password. The data was discovered by security researcher Vinny Troia who subsequently sent a subset of the data containing 126 million unique email addresses to Have I…

Victim
Apollo
Records
125.9M