An unsecured database has exposed the personal data of millions of Tommy Hilfiger's Japanese customers. Security researchers from Safety Detective discovered that the company's Elasticsearch server could be accessed without a password, revealing the names, dates of birth, addresses, phone numbers, email addresses, and total orders of customers since 2014. Furthermore, the unsecured database included details, such as price and size, of hundreds of thousands of customer orders. Tommy Hilfiger's parent company PVH has since closed the affected servers. The website has had nearly one million visitors so far in 2019.
An unsecured database has exposed the personal data of hundreds of thousands of Tommy Hilfiger's Japanese customers. Security researchers from Safety Detective discovered that the company's Elasticsearch server could be accessed without a password, revealing the names, dates of birth, addresses, phone numbers, email addresses, and total orders of customers since 2014. Furthermore, the unsecured database included details, such as price and size, of millions of customer orders. Tommy Hilfiger's parent company PVH has since closed the affected servers. The website has had nearly one million visitors so far in 2019.