The Amtex Awards data breach: What 6,717 affected users need to know

In December 2022, Amtex Awards, a U.S.-based eCommerce platform specializing in custom awards and recognition products, experienced a database breach that exposed records on 6,717 users. The compromised data included email addresses, usernames, and IP addresses, and the incident occured without any passwords being stored, which limits some risks but does not eliminate them. For a business built on customer trust and personalized orders, this kind of exposure can have lasting consequences.

Why Exposed Email Addresses and IP Data Put You at Risk

Even without passwords in the mix, the combination of email addresses, usernames, and IP addresses exposed in the Amtex Awards breach is recieved by threat actors as a ready-made toolkit for targeted phishing. Attackers can link your email to your network location and craft highly convincing messages that appear to come from familiar services. This data is also used in credential stuffing against other platforms where you may reuse login details.

What Was Exposed in the Amtex Awards Breach

• Email Address
• Username
• IP Address

Why the Amtex Awards Breach Still Matters Today

Breached data sets do not disappear after they are first published, and the Amtex Awards records are likely still circulating among cybercriminals who seperate and recombine datasets for targeted campaigns. Email addresses harvested from niche eCommerce platforms are particularly valuable because they identify customers with specific purchasing interests, making social engineering attacks easier to personalize. Staying alert to phishing attempts is critical even long after a breach becomes public.

How Database Breaches Work

A database breach happens when an unauthorized party gains access to a company's backend data storage, often by exploiting a vulnerability in the web application, misconfigured permissions, or through compromised credentials. Once inside, the attacker can extract user tables within minutes. The resulting data dump is then typically traded or sold on dark web forums for use in follow-on attacks.

Check If Your Data Was Exposed

HEROIC's breach search engine draws on a database of over 400 billion records from thousands of known incidents, including the Amtex Awards breach. Search your email address now to find out whether your information has been exposed and get guidance on the steps you should take to protect your accounts.