Skip to content
Cyber Breaches
Search
Data breachResolved

schenkYOU data breach (2024)

In September 2024, data from the online German gift store schenkYOU was put up for sale on a popular hacking forum. Obtained the month before, the data included 237k unique email addresses alongside names, dates of birth and salted SHA-256 password hashes.

Victim
schenkYOU
records
237.3K
SectorRetail
CountryGermany

Imported from Have I Been Pwned — pending editorial review and translation to French. The summary below is machine-extracted; consult the source for details.

In 2024-08-15, schenkYOU was affected by a data breach. Approximately 237,349 accounts were exposed. In September 2024, data from the online German gift store schenkYOU was put up for sale on a popular hacking forum. Obtained the month before, the data included 237k unique email addresses alongside names, dates of birth and salted SHA-256 password hashes.

Sources

  1. haveibeenpwned.comhttps://haveibeenpwned.com/PwnedWebsites#schenkYOU
  2. schenkyou.dehttps://schenkyou.de

Related incidents

Data breachContained

Lidl discloses online-shop data breach after hackers hit a third-party IT service provider

Lidl notified online-shop customers in Germany, Belgium and the Netherlands that attackers who breached one of its external IT service providers stole a file of personal data including names, contact details and dates of birth, while stressing that payment data, passwords and customer accounts were not affected.

Victim
Lidl
Data breachResolved

Fitmart data breach (2021)

In October 2021, data from the German fitness supplies store Fitmart was obtained and later redistributed online. The data included 214k unique email addresses accompanied by plain text passwords, allegedly "dehashed" from the original stored version.

Victim
Fitmart
Records
214.5K
Data breachUnknown

Leak at Electro Dépôt

Customer data attributed to French electronics retailer Electro Dépôt surfaced as one of at least 17 French breaches consolidated on an open database, exposing names, contact details, IP addresses and partial payment data.

Victim
Electro Dépôt
Data breachUnknown

Leak at Go Sport

In December 2024, French sporting-goods retailer Go Sport was named in dark-web claims of a customer data leak; the alleged fresh breach was debunked, with the data tracing back to a 'go-sport.com' file in an earlier compilation of past French breaches.

Victim
Go Sport