Brazil’s biggest cosmetics company Natura accidentally left hundreds of gigabytes of its customers’ personal and payment-related information publicly accessible online. The exposed data includes personally identifiable information on 250,000 customers, their account login cookies, along with archives containing logs from the servers and users. The leaked information also includes Moip payment account details with access tokens for nearly 40,000 wirecard.com.br users who integrated it with their NaturA accounts. The leak could have allowed attackers to directly inject a digital skimmer directly into the company’s official website to steal users’ payment card details.
Source: https://thehackernews.com/2020/05/natura-data-breach.html