WiziShop 2020 Data Breach: 2.9 Million E-commerce Users Exposed

About WiziShop

WiziShop is a French e-commerce platform and online-store builder that hosts merchants' shops and the accounts of their shoppers.

Why They Hold Your Data

An e-commerce platform holds merchant and shopper identity and contact data, phone numbers, dates of birth, physical and IP addresses and hashed account passwords.

Recent Developments

WiziShop continues to operate; the July 2020 data circulated on breach-trading channels.

Data Points Exposed

Breach Impact

The breach exposed a large base of French shoppers and merchants and drew GDPR scrutiny.

Exploitation & Downstream Threats

• Credential stuffing against reused passwords across other platforms | • Identity verification bypass using name + date of birth combination | • SIM swap attacks where phone numbers are present | • Targeted phishing campaigns using exposed email addresses | • Doxxing risk from physical address exposure

What You Should Do

1. Treat the home address as exposed: review mail and package handling and physical-security routines, and brief household staff to verify unusual requests.
2. Reset any reused passwords and enable MFA on email first, then financial accounts.
3. Guard against SIM-swap and vishing: add a carrier port-out PIN and verify any 'support' calls independently.
4. Do not use unofficial 'am I affected' lookups; several are themselves harvesting operations.

How ObscureIQ Can Help

1. Corpus confirmation: determine whether and where the principal (plus household and staff) appear in this dataset and which specific fields are exposed for them.
2. Exposure mapping and footprint neutralization: cross-reference against broker-available data and suppress still-removable elements, prioritizing address and phone, since this record re-seeds broker networks.
3. ThreatWatch tuned to this incident's identifiers and misuse pattern (impersonation and targeting patterns, not generic credential monitoring).