Goodwill discloses information breach on its ShopGoodwill platform

Picture: Ryan Stone

American nonprofit Goodwill has disclosed an information breach that affected the accounts of consumers utilizing its ShopGoodwill.com e-commerce public sale platform.

ShopGoodwill’s Vice President Ryan Smith stated in information breach notification letters despatched to impacted people that a few of their private contact info was uncovered resulting from a website vulnerability.

Smith added that no fee info was uncovered within the incident as a result of ShopGoodwill doesn’t retailer such information on its servers.

“We have been just lately alerted to a problem on our web site which resulted within the publicity of a few of your private contact info to an unauthorized third celebration. This contact info consists of your first and final identify, electronic mail handle, cellphone quantity, and mailing handle,” Smith defined.

“No fee card info was uncovered; ShopGoodwill doesn’t retailer fee card info. Whereas the third celebration accessed purchaser contact info, they didn’t entry your ShopGoodwill account.”

The nonprofit has mounted the ShopGoodwill vulnerability that led to publicity to non-public contact info.

“ShopGoodwill is dedicated to the safety of your private info and we apologize for any frustration or concern this incident could trigger,” Smith added.

“If we be taught of any extra related info, we are going to contact you instantly. If in case you have a query that has not been addressed on this communication, please electronic mail inquiries@shopgoodwill.data.”

Goodwill has served over 25 million individuals with disabilities or disadvantages worldwide in 2019 and helped greater than 230,000 people practice to discover a job in banking, IT, and well being care.

The nonprofit funds itself by promoting donated clothes and family items by way of an in depth community of 1000’s of retail thrift shops worldwide and on its ShopGoodwill.com on-line public sale website.

A Goodwill spokesperson was not out there for remark when contacted by BleepingComputer earlier at the moment.