Cyber attack on Worten exposes customer and service provider data
Worten suffered unauthorised access to customer and service provider data. Passwords and banking data were not compromised, the company guarantees.
Worten confirms cyber attack and activates national authorities
Worten was the target of a cyber attack that enabled unauthorised access to customer and service provider data, the company confirmed to Lusa news agency. According to Observador, the retailer has already proceeded with correcting the vulnerability exploited by the attackers.
In a statement sent to Lusa, the company described the incident as "a criminal act of unauthorised access to some customer and service provider data". The forensic investigation, conducted by specialised teams, is still underway.
Preliminary findings indicate that no information was altered or deleted during the attack. Credit or financial data and access credentials were not compromised, and the normal functioning of systems was not affected, Worten stated.
The company emphasised having adopted "a set of additional measures" to strengthen the protection of its systems, including the correction of the exploited vulnerability and the reinforcement of access controls.
Worten also informed that it is "in full coordination" with the National Cyber Security Centre, the National Data Protection Commission and the Judicial Police. Customers directly affected have already been notified by the company, which guaranteed to continue providing "all necessary support and clarification".
The process of notifying affected service providers is also underway, added the retailer. "At Worten the priority is the security of personal data and systems under our responsibility, whether this data concerns customers, employees or suppliers," the issued statement read.
Source: Observador