- Threat actor FutureSeeker posts new thread on BreachForums
- They claim to have stolen sensitive data from The North Pole Company
- The gift basket company has yet to respond to the allegations
The North Pole Company, a Canadian gift basket delivery service, has reportedly suffered a data breach in which half a million customers lost sensitive personal information.
The claim was made on BreachForums, a popular underground community where cybercriminals come to share tools, resources and experiences to find partners and plan future attacks.
Cybersecurity researchers from Incogni reported that a threat actor using the alias FutureSeeker posted a new thread on BreachForums on January 19 offering a North Pole database to his peers.
No answer yet
“Today I uploaded the NorthPole database for you to download, thanks for reading and enjoy!” reading the thread.
The data compromised in the attack includes email addresses, phone numbers, emails, postal addresses and full names of exactly 520,599 people.
The North Pole Company has yet to issue an official statement on the alleged breach. We have reached out and will update the article if we hear back.
The North Pole Company is a Canadian gift basket delivery service specializing in gourmet food, wine and festive holiday gift baskets, aiming to be the premier provider in Canada and the United States.
FutureSeeker is a relatively unknown name in the cybercriminal community. But if the allegations turn out to be true, that could change. More than half a million active email addresses, along with full names and phone numbers, is more than enough information for phishing and scams, leaving users potentially in need of identity theft protection.
To be on the safe side, if you’ve used The North Pole Company’s services in the past few years, be wary of incoming email messages and phone numbers, especially from people claiming to be company representatives.
