dvd-shop.ch Data Breach (2017): What Was Exposed & What To Do

Breaking down the breach

The available information indicates that the breach affected 68,000 records containing email addresses and passwords stored in plain text. No further details on the method of access, the precise date range of the intrusion, or the volume of any additional data have been disclosed. The only confirmed outcome is the exposure of those two data types and the subsequent closure notice on the original domain.

How a breach like this happens

Incidents involving the disclosure of email addresses and passwords commonly result from unauthorized access to a web application's database or user authentication system. Attackers may exploit vulnerabilities in outdated software, weak access controls, or compromised credentials elsewhere to reach stored records. When passwords are retained in plain text rather than hashed, any successful extraction immediately yields usable login information without additional processing.

About dvd-shop.ch

dvd-shop.ch operated as an online retailer based in Switzerland, selling physical media such as DVDs. Organizations in this retail category routinely maintain customer accounts to process orders, manage shipping, and handle repeat purchases. The presence of email addresses and passwords shows that the site required registered users to log in, a standard practice for e-commerce platforms handling transactions and order history.

The information in question

The breach record identifies email addresses and passwords stored in plain text as the exposed data. No other categories of information, such as names, addresses, payment details, or order histories, are listed in the available reporting. Because the exact scope of any additional records remains unconfirmed, it is not possible to determine whether further customer data left the organization.

Why it matters

Email addresses paired with plain-text passwords create a direct risk that the same credentials could be tested on other services where individuals reuse logins. For the organization, the exposure coincided with the end of its operations, leaving limited avenues for direct notification or remediation of affected accounts. The incident illustrates how even modest-sized retailers can hold authentication data that retains value after a breach.

If your data was in this breach

Individuals who held accounts with dvd-shop.ch should change the password associated with the exposed email address on any other sites where it was reused. Enabling two-factor authentication where available adds a further control. A free exposure scan of the email address against known breach data sets can indicate whether the same credentials have appeared in additional incidents.

AICompiled with AI assistance from public sources and published under our editorial standards.