Slickwraps Data Breach (2020): What Was Exposed & What To Do

In February 2020, Slickwraps, an online retailer of wraps for consumer electronics, experienced a data breach that exposed records belonging to 858,000 individuals. The incident came to light on February 16, 2020, and involved customer and subscriber information including email addresses along with names, phone numbers, physical addresses, and purchase details. Exposures of this kind continue to occur across retail and e-commerce operations that store contact and transaction records for ongoing business use.

Inside the incident

The breach was reported on February 16, 2020. It affected 858,000 unique email addresses drawn from customer records and newsletter subscribers. The additional data elements listed as exposed were names, physical addresses, phone numbers, and purchase histories. No further details on the method of access, the precise timing of the intrusion, or the total volume of files involved have been disclosed in available reporting.

How a breach like this happens

Incidents involving customer databases at online retailers commonly begin with unauthorized access to web servers or backend systems that store account and order information. Attackers may exploit unpatched software, weak authentication controls, or misconfigured access permissions to reach these repositories. Once inside, they can copy tables containing contact details and transaction histories before the activity is detected. The subsequent appearance of the data on public forums or data-sharing sites often serves as the first public indication that records have left the organization.

Who is Slickwraps?

Slickwraps operates an online store that sells decorative and protective wraps for consumer electronics such as phones, laptops, and gaming devices. Like other direct-to-consumer retailers, the company maintains records of purchases, shipping addresses, and contact information to fulfill orders and manage marketing communications including newsletters. A breach at a firm of this type is consequential because the data it holds directly links individuals to specific products they have bought and to physical locations where those products were delivered.

What data was at risk

The reported exposure included email addresses, names, phone numbers, physical addresses, and purchase histories. Public information does not specify whether additional fields such as payment card numbers, passwords, or internal account identifiers were also present in the affected records. Organizations in this sector routinely collect the listed data types to process orders and communicate with customers, yet the exact scope of records that left Slickwraps systems remains limited to the categories named in the February 2020 disclosure.

What's at stake

For individuals, the release of names, addresses, phone numbers, and purchase records can increase exposure to unsolicited contact, targeted phishing messages that reference past transactions, or attempts to misuse address information for account takeover at other services. For the organization, the incident creates obligations around notification, potential regulatory scrutiny, and the need to strengthen controls over customer data that supports core sales functions. Both sets of consequences unfold over months or years rather than immediately after the initial access.

Were you affected?

Individuals who held accounts or subscribed to communications from Slickwraps can review statements or emails from the company for any direct notification. Practical steps include monitoring email accounts for unusual messages, verifying that shipping addresses on file with other retailers remain accurate, and using unique passwords across sites. Readers may also run a free exposure scan of their email address against known breach data sets to determine whether their information appears in this or other publicly documented incidents.

AICompiled with AI assistance from public sources and published under our editorial standards.