Bangladeshi e-commerce platform Evaly is allegedly the target of a significant data breach, with claims circulating that sensitive customer and merchant information has been compromised. The alleged breach, reportedly occurring today, May 23, 2025, impacts approximately 783,611 users.
Evaly’s website currently displays a message stating, “HACKED, I HAVE ALL CUSTOMER DATA. EVALY STAFF PLEASE CONTACT OR ELSE I WILL RELEASE THIS DATA TO THE PUBLIC.”
According to posts circulating on the clear web and dark web forums, the compromised data includes full names, email addresses, phone numbers, and details regarding all orders and merchants. The alleged perpetrator is offering the stolen data for $500, with samples purportedly showing customer order information, including shipping addresses and contact details.
Customers of Evaly are advised to remain vigilant for any suspicious activity, such as phishing attempts or unauthorized use of their personal information.
