Offerz data breach affects 115,000 customers in Switzerland

Swiss online retailer Offerz has fallen victim to a significant cyberattack, potentially exposing the sensitive data of approximately 115,000 customers. The breach occurred on the night of October 7, when unauthorized actors gained access to an insufficiently secured test environment.

The vulnerability was caused by a failure to delete a copy of real order data from a cloud storage system following maintenance work. The exposed information includes names, residential addresses, email addresses, telephone numbers, and IP addresses. Offerz stated that passwords and payment details were not affected.

In response to the discovery on October 9, the company deactivated the affected environment, blocked access, and implemented a mandatory password reset for all users upon their next login. Offerz has filed a criminal complaint and notified the Federal Office for Cybersecurity (BACS) and the Federal Data Protection and Information Commissioner (EDÖB). While a full data exfiltration has not been conclusively proven, the company is treating the incident as a worst-case scenario and has warned customers to remain vigilant against phishing attempts.