A contractor to Yves Rocher has been blamed for a major data breach in which the records of more than 2.5 million customers across Canada were left open & vulnerable to hacking. The data which included personal identifers including email addresses were exposed via an unprotected API which formed part of a bespoke application created by Aliznet, a French consultancy, for its client Yves Rocher. The issues were discovered by vpnMentor which has apparently also uncovered additional weaknesses in Aliznet’s systems.
Share