Shopping Site Fiddes Exposed Names and Emails for 6,309 Customers

HEROIC analysts identified a resurfaced 2016 database breach tied to Fiddes, a now-defunct UK shopping site, exposing 6,309 customer records. The breach originally occurred on March 30, 2016, and includes first names, last names, and email addresses. No passwords were included in this particular leak, but the personal details themselves remain useful to attackers years later.

Why the Fiddes Breach Is Dangerous

Because this breach didn't include passwords, it can be tempting to write it off as low risk. That would be a mistake. A verified full name paired with an email address is exactly what phishing campaigns and impersonation scams are built on. Attackers use this kind of data to craft convincing, personalized messages that look like they come from a real company or contact, making people far more likely to click a malicious link or hand over more sensitive information.

What Was Exposed in the Fiddes Breach

• First names
• Last names
• Email addresses

Why This Breach Matters

Name and email combinations like this one are frequently bundled into larger phishing and social engineering campaigns. Because the data has circulated quietly since 2016, some of the 6,309 people in this breach may have forgotten they ever had an account with Fiddes, which actually makes them easier to catch off guard with a targeted email that references old order or account details. This kind of exposure can lead to phishing, scam attempts, and in some cases identity theft when combined with data from other breaches.

How This Database Breach Happened

This incident is classified as a database breach, meaning an attacker gained direct access to the customer records Fiddes stored, most likely through a vulnerability in the site's software following its closure. Unlike breaches that expose passwords, this one is valuable to attackers specifically for the personal details it contains, which get combined with data from other breaches to build more complete profiles on individuals over time.

Check If You Are Affected

If you ever shopped with or registered on Fiddes, it's worth checking whether your name and email are part of this exposure. HEROIC's free breach scanner checks your email against more than 400 billion leaked records, including this breach, so you know exactly where your information has surfaced.