Zoetop Breach - 2018

Zoetop is the parent company of Romwe and SHEIN. The company is known for its affordability and has a $100 billion outlook for 2022.

What Was the Breach?

The breach was an attack that reached the personal information of tens of millions of consumers. The slogan on Romwe’s website reads, “a cyber mall for the next gen,” so many of its users are minors or young adults.

How Did the Breach Occur?

A cybersecurity attack hit Zoetop in 2018 and affected many shoppers on SHEIN and Romwe. Over 40 million people were affected by the breach. With the state of the world today, the accessed information is detrimental to the users; if the actor uses the card information, they can ruin the credit and futures of any number of users.

When Did This Breach Occur?

This breach originally occurred in 2018.

Who Does the Breach Impact?

The hack affected almost all of SHEIN’s customers. A portion of Romwe’s consumers was also affected, with certain personal information accessed by the bad actor. The information may not seem critical, with half of it just being the password to the site and the associated email, but this can endanger you in ways you’d never imagine.

How Many Files Does the Breach Affect?

The breach impacts more than 46 million individuals. 39 million SHEIN customers and 7 million Romwe shoppers had their login credentials, names, and payment information accessed, stolen, and most likely sold. Credential stuffing (a method where a hacker uses an email and password stolen in one breach to access other websites with the same login) and identity theft are real threats facing these consumers.