US ONLINE RETAILER Zappos has fallen victim to a cyber attack that could have exposed more than 24 million customers' details.
Zappos, which is owned by Amazon, has announced to its customers that its servers have been hacked and customer details have been accessed. Luckily for its customers the server containing critical credit card details was not breached.
Tony Hsieh CEO of Zappos said in an email, "We were recently the victim of a cyber attack by a criminal who gained access to parts of our internal network and systems through one of our servers in Kentucky. We are cooperating with law enforcement to undergo an exhaustive investigation."
The firm said that users' names, e-mail addresses, billing and shipping addresses, phone numbers, the last four digits of credit cards and/or cryptographically scrambled passwords might have been obtained. The web site confirmed on Twitter that Amazon accounts are unaffected.
@Ost1ng You assume correct. Your Amazon account will not be affected.
— Zappos.com (@Zappos_Service) January 16, 2012
All passwords have been reset as a precaution and users are being urged to change their passwords on other web sites where it is the same or similar.
"It's painful to see us take so many steps back due to a single incident. I suppose the one saving grace is that the database that stores our customers' critical credit card and other payment data was not affected or accessed," Hsieh added.
He said that the company's entire staff are getting training to help customers with the situation. µ
Tags: Security