- Security researcher finds unencrypted database belonging to Australian fashion mark
- It contained names, E -mail addresses, phone numbers and more, of at least 3.5 million people
- Sabo warns users to be on their guard
Australian fashion brand Sabo leaked sensitive data about millions of its customers by keeping an unencrypted, non-passord-protected database on the Internet available to anyone who knew where to see.
Jeremiah Fowler, a security researcher known to discover these types of leaks, found a 292 GB archive containing 3,587,960 .PDF documents containing names, physical addresses, E -mail addresses, phone numbers and other personally identifiable information (PII) that belong to both retail and business.
The number of devices whose information was leaked could be about 3.5 million, but it could also be – fifty times as many.
Locking of the database
“In a single PDF file, there were 50 separate order pages, indicating that the total number of potential customers is higher than the total number of PDF files in the database,” Fowler explained.
The information was generated through an internal document management storage system, designed to track sales and returns as well as the corresponding domestic and international shipping documents.
As the file dates range from 2015 to 2025, it is safe to assume that some of the information is outdated and some are very relevant.
Fowler reached out to Sabo with the information and the database was locked down “within hours”. However, the company never responded to the researcher’s e email, so we do not know how long the database remained open that maintained it or if anyone managed to find and exfilter the information before he did.
Sabo is an Australian fashion brand that designs and sells exclusive collections of clothes, shoes, swimwear, sleepwear and formal clothes. It is primarily an Australian brand operating in the country. However, it also sells its products online and allows worldwide shipments.
It currently has three stores in the country and has reported an annual revenue of $ 18 million for 2024.
