Poshmark, an online American marketplace, announced on Thursday, August 1, that it was the victim of a hacking attack, resulting in the breach of its users' data. Poshmark is used by citizens of North America. Users can buy and sell new or used clothes, shoes and accessories.
The company stated that someone managed to gain access to servers its, resulting in the theft of a lot of information, such as usernames, hashed passwords, first and last names of users, as well as information related to gender and city of residence.
The hackers also stole information regarding users' size and clothing preferences, emails , and information from users' social media profiles.
Poshmark said that a “one-way hashing” algorithm was used for passwords . Specifically, it spoke of “hashed and salted passwords.” This makes it nearly impossible to use the passwords to gain access to an account, the company said.
The hackers also gained access to some less important information, such as some accounts used by Poshmark to send email notifications.
Poshmark did not disclose exactly when the breach occurred or when it discovered it, but it said were compromised data or home addresses of users
In a post on its website, the online marketplace said it has hired a security to investigate the breach. The results so far indicate no serious impact.
The company said it has begun notifying all affected customers via email.
Poshmark said the stolen data belonged exclusively to U.S. users and that no Canadian users were affected. The company had more than 50 million registered users. However, it did not say how many customers were affected.
Last year, fashion company SHEIN also fell victim to hacking, resulting in the theft of information from 6.42 million users.
