Guess Announces Data Breach After Ransomware Attack

Exploit: Ransomware Company: Guess Industry: Fashion, Retail Sources: https://www.bleepingcomputer.com/news/security/fashion-retailer-guess-discloses-data-breach-after-ransomware-attack/

Dark web researchers have uncovered around 200 GB of leaked data from retail fashion brand, Guess. While the company has not disclosed many details, Guess has admitted that cyber criminals gained access to their network. The company is responding by sending letters out to an unknown number of people that may have potentially been affected by lost data during a ransomware attack that took place earlier this year in February.

In letters to individuals, the company states that unauthorized access to Guess’ systems between February 2 – February 23 have led to compromised Social Security numbers, driver’s license numbers, passport numbers, and financial accounts.

While the company is not divulging many details of the incident, a Guess spokesperson has assured that “no customer payment card information was involved.” Further confirmation of the breach details and whether or not the breach was part of the ransomware attack has not been clarified, however, the leaked data was found on the Ransomware group, Darkside’s Dark web data leak site in April and the group openly announced that the 200 GB of data was taken during the Ransomware incident in February.

As ongoing investigations take place, letters from the company were sent out in early June to those potentially affected. Guess has offered victims one year of credit monitoring and identity theft protection services. The company itself has begun to implement additional measures to boost security protocols while cooperating with law enforcement to conclude the incident investigations.