In a new post on a dark web forum, a threat actor has claimed responsibility for an alleged data breach at Boutiqaat, a Kuwait-based e-commerce platform specializing in cosmetics. According to the forum post, the breach reportedly exposed sensitive information of approximately 3 million users.
According to the post, Boutiqaat, which operates out of Hawalli, Kuwait, offers a unique shopping experience by allowing social media influencers to curate virtual boutiques featuring their favorite beauty products.
The threat actor posted a detailed list of the allegedly compromised data fields, which include user identification details such as:
- ID
- Name
- Date of Birth (DOB)
- Gender
- Account Lock Status
- Call Enabled Status
- User Class
- Creation Date and Location of Accounts
These allegations, if confirmed, could pose significant privacy and security risks to affected users, as the leaked information may be exploited for malicious activities like identity theft or phishing attacks.
