Gumac Data Breach Exposes 78K Vietnamese Fashion Shoppers

HEROIC's DarkHive intelligence system discovered the Gumac data breach, exposing 77,591 records. The breach occured in December 2023, affecting this Vietnamese fashion retailer known for women's clothing and accessories. The leaked data includes email addresses, phone numbers, full names, and birthdays, creating significant risks of identity theft and targeted fraud for affected customers.

Why This Is Dangerous

The combination of full name, email address, phone number, and birthday creates a highly detailed personal profile. Attackers use this data to launch convincing SMS phishing campaigns impersonating Gumac, claiming shipping updates, loyalty rewards, or account verification requests. Birthday data additionally enables attackers to answer identity verification questions used by financial institutions and telecom providers, increasing the risk of SIM swapping and account takeover beyond just the Gumac platform itself.

What Was Exposed

• Email Address
• Phone Number
• First Name
• Last Name
• Birthday

Why This Matters

Fashion retail customer data is particularly valuable to fraudsters because it reveals purchasing power and consumer behavior. The Gumac breach exposes customers who have demonstrated willingness to spend on clothing purchases, making them attractive targets for financial fraud, premium subscription scams, and phishing attacks. Victims who recieve suspicious messages claiming to be from Gumac should not click any links, and those who notice thier personal information being misused should report it to the relevant authorities and check thier credit reports for unusual activity.

How Database Breach Works

Database breaches at fashion ecommerce platforms typically occur through exploitation of vulnerabilities in the shopping cart software, content management systems, or third-party integrations like payment gateways and shipping APIs. Attackers may also leverage SQL injection attacks or exploit poorly secured administrative interfaces. Once they gain database access, they extract the customer records in bulk. Vietnam's rapidly growing ecommerce sector has attracted increased attention from cybercriminals who target platforms with large customer bases but potentially limited cybersecurity resources.

Check If You Are Affected

HEROIC offers a free identity scanner that searches over 400 billion records, including data from breaches like Gumac. Visit heroic.com to scan your email address and find out if your information was exposed.