Site icon Sophos News

Malware hits fashion giant SHEIN; 6.42 million online shoppers affected

Women’s online fashion retailer SHEIN has been hit by malware that snagged 6.42m site visitors’ email addresses and encrypted passwords, the company has announced.
SHEIN said that it discovered the breach on 22 August, but that it actually started in June and continued through early August. Those details may change as the investigation continues: the retailer says it hired a leading international forensic cybersecurity firm and an international law firm to conduct a thorough investigation.
The company didn’t specify what malware it found on its servers; just that it’s scrubbed it off and has closed and closed the backdoors that the attackers opened.
In a data security FAQ, SHEIN said that it hasn’t seen any evidence pointing to theft of credit card data. It typically doesn’t store such information on its servers, SHEIN said. But if anybody does see suspicious activity on their payment cards, SHEIN is urging them to contact their bank or credit card company about it.
The site is now safe to visit, the retailer says. It’s asking customers to reset their passwords by clicking on an email notification it sent or by logging into their accounts and clicking the “Edit Password” link under the “Account Setting” page. SHEIN concludes:

After completing the password reset process, customers should feel safe and confident about making purchases.

Do be careful about clicking on links in emails, though: it would be all too easy for crooks to send boobytrapped emails spoofed to look like they came from SHEIN but actually rigged with malicious links. It’s a safer bet to navigate to the site and change your account password there.


SHEIN says it’s beefing up security measures, per investigators’ recommendation. It’s also offering one year of identity protection to customers in some of its markets.

What to do?


Exit mobile version