已确认

Santa Lolla discloses unauthorised access to ecommerce customer and order data

Unauthorised access during September 23–24 involved customer names, CPF identifiers, email, phones, delivery addresses and order numbers. Access to passwords or payment data was not identified.

最后更新: 2026-11-09

此内容以 English 显示。

概述

The notice is dated October 29. The entry route in a multi-partner ecommerce environment remains under investigation and the count is unknown. Fraud using real customer data has involved fake gifts, shipping fees or PIX payments, but not every fraud report is conclusively attributed to this event.

时间线

  1. 发生
  2. 发现
  3. 披露
  4. Start of the disclosed access period.

  5. End of the disclosed access period.

  6. Customer notice published.

组织应对措施

The company undertook independent analysis, reviewed credentials/permissions, sought takedown of fraudulent sites, notified ANPD and warned against fees supposedly needed to release orders.

用户应对建议

Check notices through the organisation’s genuine contact channels. Do not enter credentials or payment details through links in unexpected messages.

信息来源

  1. Comunicado sobre incidente de segurança com dados pessoaisSanta Lolla · 2026-11-09

相关信息与讨论

提交信息

暂无公开信息

来源核实或审核通过后,信息将显示在此处。

评论与回复

写评论

无需注册。评论提交后立即公开。

请勿发布私人姓名、地址、密码或验证码。自动遮盖有局限,请在提交前检查。

必填项标有 *。

提交正文后可遮盖敏感信息并添加图片。

正在加载安全验证。验证完成后即可提交。