How can I confirm the data breach?

Visit security platforms such as Have I Been Pwned to check for exposure.

Why is SHA-1 hashing insufficient?

SHA-1 is considered weak against modern attacks due to vulnerabilities in collision resistance.

What steps should Romwe take to prevent future breaches?

Employ better encryption for passwords and implement regular security audits.

Does this breach impact users outside Hong Kong?

Yes, as Romwe serves a global customer base, users worldwide were potentially affected.

Romwe

High

Romwe's data breach in 2018 exposed diverse customer data, affecting nearly 20 million individuals.

19,531,820 recordsBreach Jun 1, 2018Updated Jan 18, 2021

Source

Exposed data classes

Fields reported as compromised in this breach record.

Geographic locationsIP addressesNamesPasswordsPhone numbersPhysical addresses

Detailed Analysis

In-depth analysis of the breach and its implications.

In mid-2018, Romwe, a Hong Kong-based online retailer, experienced a security breach that exposed data of nearly 20 million customers. Compromised information included names, phone numbers, email addresses, IP addresses, geographic locations, and passwords hashed using SHA-1 with salting. This data was later found for sale online.

Impact Analysis

Understanding the scope and consequences of this breach.

User Impact: Affected users must secure their accounts as personal and credential information was compromised.
Business Impact: Romwe faced reputational damage and increased scrutiny over cybersecurity policies.
Affected Sectors: E-commerce
Geographic Impact: Global

What You Should Do

Recommended actions to take in response to this breach.

If You Were Affected

•Change account passwords on impacted platforms.
•Monitor accounts for suspicious activities.
•Consider enabling two-factor authentication.

Preventive Measures

•Avoid reusing passwords across sites.
•Use strong, unique passwords for each account.
•Review and limit personal data shared online.

Frequently Asked Questions

Common questions about this breach and what it means for you.

Check if your account is impacted and change its password immediately.