French DIY etailer ManoMano admits customer data stolen
Summary
French DIY etailer ManoMano admitted that customer data was stolen after a cyberattack hit one of its customer support subcontractors in January. The attackers claim to have stolen data from over 37 million accounts, a significantly larger number than ManoMano initially suggested.
IFF Assessment
A data breach impacting a large number of customer accounts is detrimental to the security posture of the organization and its customers.
Defender Context
Data breaches through third-party subcontractors remain a significant risk. Defenders must ensure robust security assessments and agreements are in place with all vendors who handle sensitive data. Continuous monitoring and incident response plans that incorporate third-party risks are critical to mitigating the potential impact of such breaches.