Staples

Summary

The office retail giant, Staples, notified affected customers of a data breach related to their orders. The data accessed by an unauthorized party includes customers’ name, address, email, phone number, last four digits of payment cards used, and information about the cost, delivery, and products ordered. Account credentials and full payment card numbers were not impacted as Staples found no evidence of unauthorized purchases related to the impacted customers; however, the breached data could potentially be used for malicious activity. Staples fixed the issue, which is suspected to be related to unpatched systems and a vulnerability in the order tracking system.