Cybersecurity incident
Date: 2017-10-25 00:00:00
Affected organization: Tarte Cosmetics
Affected country: United States of America
Industry: Retail Trade
Event type: Mixed
Event subtype: Data Attack,Exploitation of Application Server
Motive: Financial
Actor: Cru3lty
Actor type: Criminal
Actor country: Undetermined
Description: Tarte Cosmetics exposes nearly two million customers' personal data to the public via two unsecured MongoDB databases. Unfortunately the gang Cru3lty get hold of the data, demanding 0.2 Bitcoins for recovering the database once the data had been deleted or encrypted.