GLAMIRA Data Breach Exposes 875K Customer Records in 2023

HEROIC's DarkHive intelligence system discovered the GLAMIRA data breach, exposing 874,681 records. The breach occured in December 2023, affecting this US-based ecommerce platform specializing in customizable fine jewelry. The leaked data includes email addresses, phone numbers, and full names of customers, creating significant risks for targeted fraud and identity theft.

Why This Is Dangerous

GLAMIRA customers are high-value targets for fraudsters. With full names, email addresses, and phone numbers exposed, attackers can impersonate GLAMIRA in convincing phishing emails or SMS messages about order status or refunds. The combination of contact details and purchase context makes this breach more dangerous than generic email lists, since attackers can craft highly targeted messages that reference specific customer circumstances.

What Was Exposed

• Email Address
• Phone Number
• First Name
• Last Name

Why This Matters

Even without passwords, personally identifiable information creates lasting risks for affected customers. Full names paired with email and phone data allow attackers to build detailed profiles used in social engineering and account recovery attacks. The GLAMIRA breach data can be combined with passwords from other breaches, taking advantage of users who recieve security alerts and may inadvertently enter thier credentials on spoofed sites. Affected customers should watch for unsolicited contact claiming to be from GLAMIRA.

How Database Breach Works

A database breach at an ecommerce platform typically occurs through exploitation of vulnerabilities in shopping platform software, third-party plugins, or exposed API endpoints. Attackers may also target administrative credentials to gain direct database access. Once inside, they extract customer records containing names, contact information, and order history. The scale of this breach, nearly 875,000 records, indicates a comprehensive dump of the customer database.

Check If You Are Affected

HEROIC offers a free identity scanner that searches over 400 billion records, including data from breaches like GLAMIRA. Visit heroic.com to scan your email address and find out if your information was exposed.