Stockx Data Breach Investigation and Resolution

StockX, the online marketplace for buying and selling sneakers and streetwear, experienced a data breach that exposed sensitive information of its users. The breach occurred in April 2021.

The investigation into the breach revealed that hackers gained access to StockX's database through a third-party service provider. This was the first major data breach for the company.

StockX took immediate action to resolve the breach, notifying affected users and offering them free credit monitoring services. The company also provided a dedicated website with information and resources for those impacted by the breach.

For another approach, see: Users Retrieve Data Stored

The StockX data breach was initially disguised as a system update, but later investigations revealed that the stolen data was sold on the dark web.

Hackers managed to infiltrate StockX's servers, exposing sensitive user data and violating GDPR rules.

This type of deception is a common tactic used by hackers to gain access to a company's system.

The fact that the breach was disguised as a system update makes it even more concerning, as it suggests that the hackers were able to blend in seamlessly with the company's normal operations.

On a similar theme: Does Stockx Have Afterpay?

Sensitive user data was exposed, which is a serious violation of users' trust and a potential threat to their personal security.

The GDPR rules were also violated, which is a major concern for companies that handle sensitive user data.

This breach highlights the importance of having robust security measures in place to prevent such incidents from happening in the first place.

You might like: Data Security Issues That Must Be Addressed by Hipaa

StockX's data breach exposed personal information of some customers, including names, email addresses, shipping addresses, usernames, hashed passwords, and purchase history. This information was accessed by an unknown third party, but fortunately, no financial or payment information was affected.

StockX took immediate action to secure its platform, launching a forensic investigation, engaging third-party experts, and implementing infrastructure changes. They also contacted law enforcement and notified customers about the incident.

As a precaution, StockX offered 12 months of free fraud detection and identity theft protection through ID Experts to affected customers. This is a great example of a company taking proactive steps to protect its customers.

Here's an interesting read: Bank of America Data Breach Affects 57 000 Customers

The breach highlights the importance of strong passwords and unique login credentials. If you've used the same or similar passwords for other online accounts, it's essential to reset those as well.

To protect yourself, consider enabling Two-Factor Authentication (2FA) on the breached platform and any other important online accounts. This additional security feature can significantly reduce the risk of unauthorized access.

Here are some steps you can take to protect yourself:

StockX has updated its system's security, reset all customer passwords, and alerted customers about the change. They've also recommended that customers who use their StockX passwords for other accounts change those passwords as well.

Update: StockX has announced that they have implemented additional security measures to protect their customers' data, including two-factor authentication and encryption.

StockX has confirmed that the breach occurred in January 2022, and they have been working with law enforcement to investigate the incident.

The breach exposed sensitive information, including names, email addresses, and phone numbers.

A total of 6.5 million customers were affected by the breach, which is a significant portion of StockX's user base.

StockX has offered free credit monitoring and identity theft protection to affected customers.

A proposed Canada-wide settlement has been reached in a class action related to the data breach incident suffered by StockX. The breach occurred on May 14, 2019, when an unknown third party gained unauthorized access to StockX's cloud environment.

Over 6.8 million records were stolen from StockX, including names, email addresses, encrypted user passwords, shoe size, trading currency, device type, and software version. This is a massive data breach that affects many people.

The settlement will provide an 18-month subscription with TransUnion for credit monitoring services, free of charge. This is a valuable service that can help protect people's credit.

Class members who can provide proof of out-of-pocket costs or unreimbursed expenses caused by or incurred as a result of the data breach may also be reimbursed up to an aggregate cap of $130,000. This is a significant amount that can help people recover from the breach.

A hearing over the settlement approval took place on July 05, 2022, at the Montreal Courthouse. However, class members are not required to attend the hearing.

Here's a summary of the settlement benefits: