Gecko Custom, an e-commerce brand specializing in personalized gifts, has allegedly been compromised in a substantial data breach. The incident came to light after a database was advertised on a cybercrime forum, with claims that it contains widespread global data primarily impacting users across the United Kingdom, the United States, and Canada. The post advertises two distinct datasets, consisting of 668,000 rows of order data and 572,000 rows of customer data.
According to the actor, the allegedly compromised data includes:
-
Customer full names
-
Email addresses
-
Phone numbers
-
Full physical addresses
-
Partial payment card details (Last 4 digits)
-
Transaction IDs and transaction amounts
-
Total customer spend and order counts
-
UTM tracking sources
-
Country-specific user segments
