SignalAtlas
Partager une information
Confirmé

Santa Lolla discloses unauthorised access to ecommerce customer and order data

Unauthorised access during September 23–24 involved customer names, CPF identifiers, email, phones, delivery addresses and order numbers. Access to passwords or payment data was not identified.

Dernière mise à jour: 2026-11-09

Ce contenu est affiché en English.

Présentation

The notice is dated October 29. The entry route in a multi-partner ecommerce environment remains under investigation and the count is unknown. Fraud using real customer data has involved fake gifts, shipping fees or PIX payments, but not every fraud report is conclusively attributed to this event.

Chronologie

  1. Survenue
  2. Découverte
  3. Divulgation

  4. Start of the disclosed access period.

  5. End of the disclosed access period.

  6. Customer notice published.

Réponse de l’organisation

The company undertook independent analysis, reviewed credentials/permissions, sought takedown of fraudulent sites, notified ANPD and warned against fees supposedly needed to release orders.

Que faire ?

Check notices through the organisation’s genuine contact channels. Do not enter credentials or payment details through links in unexpected messages.

Sources

  1. Comunicado sobre incidente de segurança com dados pessoaisSanta Lolla · 2026-11-09

Informations associées

Partager une information

Aucune information publiée

Les informations apparaîtront après vérification ou modération.

Commentaires et réponses

Écrire un commentaire

Sans inscription. Les commentaires sont publiés immédiatement.

Ne publiez pas de noms privés, d’adresses, de mots de passe ou de codes. Le masquage automatique est limité : vérifiez avant l’envoi.