Škoda Germany online shop software flaw exploited, customer data and account credentials may be exposed

Škoda Germany said its security monitoring found unauthorized parties exploited a vulnerability in its online shop's standard software to temporarily access the shop system; the shop was taken offline, the flaw fixed and the data protection authority notified ^[1]. Data possibly affected includes names, addresses, emails, phone numbers, order details and account credentials (passwords stored as hashes), while full card data was not stored there; according to BleepingComputer, only the shop run by the German importer was affected and the number of victims was not disclosed ^[1][2]. Škoda recommends that anyone who used the same or similar password for the Škoda online shop on other services change those passwords immediately and use unique credentials for each service ^[1].

Industries mainly affected: Retail

1. If you reused your Škoda shop password elsewhere, change it immediately and use unique credentials for each service ^[1].