Massive Data Breach Exposes 1.6 Million Customer Emails from Etsy and TikTok Shops
May 28, 2025
A significant data breach has compromised the personal information of approximately 1.6 million customers from major e-commerce platforms, including Etsy, TikTok Shop, and Poshmark. Cybersecurity researchers from Cybernews discovered two unsecured Azure Blob Storage containers containing over 1.6 million files, primarily shipping confirmation emails in HTML format. Cybernews+4Cybernews+4The IT Nerd+4
The exposed data includes full names, home addresses, email addresses, and detailed order information. While the majority of affected users are based in the United States, some customers from Canada and Australia are also impacted. The breach poses significant risks, as attackers could exploit this information to conduct phishing campaigns, impersonate trusted entities like Etsy or shipping providers, and distribute malware through seemingly legitimate communications.Cybernews+1The IT Nerd+1Cybernews+2The IT Nerd+2The IT Nerd+2
The exact source of the leak remains unidentified. However, evidence suggests that the compromised data may be linked to a Vietnamese-based embroidery service operating multiple shops across various e-commerce platforms. The misconfigured cloud storage lacked proper security measures, leaving sensitive customer information publicly accessible.IT ProCybernews
Cybersecurity experts recommend that affected platforms implement stringent security protocols, including server-side encryption, secure key management, and regular access audits, to prevent future breaches. Customers are advised to remain vigilant for suspicious emails or messages and to avoid clicking on unfamiliar links or providing personal information to unverified sources.
