A major data breach has rocked Dkhoon Emirates, a prominent fragrance brand known for its collaborations with key influencers in the industry. The breach, masterminded by a cybercriminal known as Ddarknotevil, has left the brand reeling as sensitive customer data from over 1.1 million records is now up for sale on the dark web.
The compromised databases reportedly contain a treasure trove of personal information, including full names, phone numbers, email addresses, and physical addresses. Ddarknotevil is brazenly advertising this data for a hefty sum of $4,800, with transactions limited to cryptocurrencies such as XMR and BTC.
Should there be no takers for the pilfered information, the cybercriminal has issued a chilling warning that the data could be made public. While the veracity of these claims remains uncertain, customers of Dkhoon Emirates are urged to remain vigilant against potential phishing attacks in the wake of this breach.
In light of these alarming developments, The Cyber Express sought clarity from Dkhoon Emirates regarding the alleged breach. However, the company has yet to provide a formal response or comment on the matter, leaving the assertions surrounding the data leak unverified at this time.
Interestingly, Dkhoon Emirates, a relatively new player in the market with a selection of 22 perfumes in its repertoire, now finds itself embroiled in a cybersecurity crisis of significant proportions. The perpetrator has not divulged the methods used to infiltrate the brand’s databases or indicated any intent to negotiate a ransom, opting instead to sell the data directly on the dark web.
The breach suffered by Dkhoon Emirates is part of a broader trend targeting fashion and lifestyle brands in the cyber realm. Just last year, Estée Lauder Companies (ELC) fell victim to a similar cyberattack, prompting the company to take swift action to prevent further data breaches. Now, Dkhoon Emirates grapples with its own cybersecurity dilemma at the hands of a persistent threat actor.
Notably, the individual behind the Dkhoon Emirates data leak has a track record of involvement in previous cybercrimes. This threat actor previously claimed responsibility for a breach that affected thousands of users of cloud solutions provider Okta in March 2024. However, subsequent investigations revealed inconsistencies in the claims, casting doubt on the assertion that the breach was a mere rehash of previously stolen data.
As the repercussions of the Dkhoon Emirates data breach continue to unfold, consumers and industry observers alike are left to ponder the implications of such a brazen cybercrime. With personal information hanging in the balance, the importance of robust cybersecurity measures and vigilance in the digital landscape has never been more apparent.