According to a post on a dark web forum, a threat actor claims to offer the personal details of 11 million Dresslily users for sale.
The data is being sold for $200,000, with a promise of a one-time sale. The threat actor provided a sample as well as an email as a point of contact. In the message, the threat actors state that Dresslily itself is welcome to purchase the stolen data.
According to the post, the stolen data includes user IDs, full names, phone numbers, email addresses, home addresses, states, countries, and ZIP codes.
