91APP

91APP Commerce Cloud Order Database Breached: Unpatched Appsmith Exploited as Entry Point; Member Order Data Across Brands Leaked and Abused for Scams

E-commerce technology provider 91APP confirmed that one of its Commerce Cloud order databases was illegally accessed on October 3 via an unpatched third-party tool, Appsmith, after which the attacker retrieved database credentials from an internal GitLab instance .