- Pandora informed its customers of a data violation
- The pirates stole the names of people and email addresses
- Unconfirmed reports named shinyhuters as authors
The Pandora jewelry power plant confirmed that it has suffered from a cyber attack that has seen it lose information with sensitive customers.
The company revealed the news in a letter of notification of data violation sent to the customers concerned who said: “We write to inform you that Pandora has experienced a cybersecurity attack, where certain customer information has been accessible via a third-party platform that we use.
“We want to reassure you that the attack has been stopped and, therefore, we have further strengthened our security measures.”
Chulleurs
Pandora stressed that the “very common types” of data were exfiltrated – the names and email addresses. Passwords, credit card details and similar confidential data have not been taken.
The company also said that its survey had determined that the data had not yet been mistreated, but it recommends that users remain vigilant and keep track of unlined emails or online interactions requiring their data.
“Therefore, we recommend that you do not click on the links or download attachments from unknown sources,” he said.
The company did not say who were the threats of the threat, how they managed to access the Pandora networks, or how many people have been affected by this incident.
However Bleeping Compompute Affirms that the attack was probably the work of shinyhuters who burst into the database database of Pandora.
Depending on the publication, ShinyHuanters has been looking for a path in business databases since January 2025 and has used different social engineering and phishing tactics.
Apparently, we have worked, and ShinyHuanters now says that they will “make a mass sale or a leak” of companies that refuse to pay the ransom.
Salesforce, on the other hand, confirmed that his solutions were not compromised.
“Salesforce has not been compromised, and the problems described are not due to any known vulnerability in our platform. Although Salesforce strengthens business quality safety in everything we do, customers also play an essential role in ensuring the security of their data – in particular in the midst of an increase in sophisticated phishing and social engineering attacks,” said Salesforce.
