Online shoppers once again became the victim of a data breach. Those who buy versatile, sustainable and stylish clothing have joined the ever-growing list of those who have had their names, payment card information, address, email address, phone number, and login details stolen as part of an intrusion of prAna.
According to a letter from the company, an “unauthorized third party may have obtained access to the servers that operate our e-commerce website…” between December 14, 2016 and February 6, 2017. In addition, the third party may also have accessed and decrypted a database that included information from orders prior to February 6.
Because login credentials were obtained, those with a prAna account should change their passwords immediately. In fact, logging into the site prompts affected users to reset them. When creating passwords for any online account, use at least eight characters and include both upper and lower case letters, a number, and a special character. The more of these last two, the stronger the password. Also, don’t use actual dictionary words or any information that is specific such as birthdates. Every password should also be unique to each account. This way, if attackers get one password, they won’t be able to successfully use it on others.
In addition, check payment card charges diligently for suspicious activity for at least the next 12 months. If there is an option to set up alerts in the account, consider doing that. This will allow the financial institution to send an email or text whenever a transaction over that particular amount is charged to the card number. If anything is suspicious, alert the card issuer immediately for resolution.
prAna has hired a cybersecurity firm to investigate and remediate the situation. It has also notified the FBI and is working toward strengthening the security on the website.
For banks and credit unions
Share this article with your members
Copy a ready-made summary and link for your newsletter, website or social posts.
