Confirmado

Santa Lolla discloses unauthorised access to ecommerce customer and order data

Unauthorised access during September 23–24 involved customer names, CPF identifiers, email, phones, delivery addresses and order numbers. Access to passwords or payment data was not identified.

Última actualización: 2026-11-09

Este contenido se muestra en English.

Resumen

The notice is dated October 29. The entry route in a multi-partner ecommerce environment remains under investigation and the count is unknown. Fraud using real customer data has involved fake gifts, shipping fees or PIX payments, but not every fraud report is conclusively attributed to this event.

Cronología

  1. Ocurrencia
  2. Descubrimiento
  3. Divulgación
  4. Start of the disclosed access period.

  5. End of the disclosed access period.

  6. Customer notice published.

Respuesta de la organización

The company undertook independent analysis, reviewed credentials/permissions, sought takedown of fraudulent sites, notified ANPD and warned against fees supposedly needed to release orders.

Qué puedes hacer

Check notices through the organisation’s genuine contact channels. Do not enter credentials or payment details through links in unexpected messages.

Fuentes

  1. Comunicado sobre incidente de segurança com dados pessoaisSanta Lolla · 2026-11-09

Información relacionada

Compartir información

Aún no hay información publicada

La información aparecerá tras verificar fuentes o moderar los avisos.

Comentarios y respuestas

Escribir un comentario

Sin registro. Los comentarios se publican de inmediato.

No publiques nombres privados, direcciones, contraseñas ni códigos. El enmascarado automático tiene límites: revisa antes de enviar.