Vinomofo data breach: 500,000 customers at risk after wine dealer hit by cyber-attack
Wine dealer Vinomofo is the latest Australian company to be targeted by a cyber-attack.
At risk of exposure are the names, dates of birth, addresses, email addresses, phone numbers and genders of customers – Vinomofo has about 500,000 people on its books, but it’s not clear if all were exposed.
Vinomofo said the risk to members was “low” because other information, such as passports, credit card details and driver’s licences were not held by Vinomofo.
“Vinomofo experienced a cybersecurity incident where an unauthorised third party unlawfully accessed our database on a testing platform that is not linked to our live Vinomofo website,” the chief executive, Paul Edginton, said in a statement emailed to customers.
“Vinomofo does not hold identity or financial data such as passports, driver’s licences or credit cards/bank details. While no passwords, identity documents or financial information were accessed, the database includes other information about customers and members.”
The company has reported the hack and told customers to “remain alert to any increased scam activity”.
The latest cyber-attack comes as Australia continues to deal with the ramifications of the Optus hack, which exposed the details of about 10 million people.
Weeks after the initial attack, Optus revealed that customers whose passport numbers were exposed would no longer be able to use them to access identity verification services online, making it harder to access government agencies and financial institutions.
Medibank says it has “resumed normal activity for all customers” after a possible ransomware threat on the health insurer last week.
The CEO, David Koczkar, said the company’s ongoing investigation had turned up no evidence that any customer data had been removed.
“Our cybersecurity protection systems had detected activity that was consistent with a possible ransomware threat,” he said. “I want to assure you that our systems were no encrypted by ransomware during this incident.
“We remain vigilant and will continue to take the necessary steps to protect your data.”
MyDeal, an online retail store owned by Woolworths, has also had a recent data breach, with 2.2 million customers’ details exposed. Customer names, email addresses, phone numbers and delivery addresses were affected, along with birth dates for people who had to verify their age to buy alcohol.