Aditya Birla Fashion and Retail
Controversies
Controversies tied to this brand in public sources. A listing is not a finding of fault.
Back to profile2 entries
2022
ABFRL discloses e-commerce database breach
Issue disclosure
ABFRL confirmed an information security incident involving unauthorised access to its e-commerce database. Reports said more than 5.4 million email addresses were released online. The company said there was no operational or business impact and that it had reset customer passwords and enabled OTP-based authentication.
Company response
Investigation — ABFRL
The company has engaged forensic security experts to investigate the data breach incident where over 5.4 million email addresses were released online from the portal of the Aditya Birla Group-owned company.
Remediation — ABFRL
As a pro-active measure, the company has reset passwords of all customers and enabled OTP based authentication and taken further steps to secure access to customer and employee information,
Source excerpt
As a pro-active measure, the company has reset passwords of all customers and enabled OTP based authentication and taken further steps to secure access to customer and employee information,
According to the reports, ABFRL's database has been made public by a hacker group known as ShinyHunters.
ABFRL is investigating an information security incident that entailed unauthorised access to its e-commerce database,
2021
ShinyHunters data breach
In December 2021, ShinyHunters was reported to have breached ABFRL systems and later published customer information on a hacking forum. Reported exposed fields included email addresses, names, telephone numbers, physical addresses, order histories and passwords stored as MD5 hashes. The incident raised data-security and customer-privacy concerns.