WiziShop Data Breach (2020): What Was Exposed & What To Do
SourceBreach data provided in part by Have I Been Pwned, used under CC BY 4.0.
The WiziShop Data Breach (2020) (reported July 14, 2020) exposed Dates of birth, Email addresses, IP addresses and Names belonging to roughly 2.9M people. If you have an account with them, your information may now be circulating on the open web and with data brokers. Here’s exactly what happened, how to check if you were affected, and what to do next.
Inside the incident
The breach affected nearly 2.9 million unique email addresses along with associated customer records. The exposed material totalled 18 GB and included names, dates of birth, physical addresses, telephone numbers, IP addresses, and SHA-1 password hashes.
No further technical details about how the data was obtained or the period during which it remained accessible have been disclosed in available reporting.
How a breach like this happens
E-commerce platforms routinely store large volumes of customer records to process orders and manage accounts. Unauthorised access can occur through vulnerabilities in web applications, misconfigured databases, or compromised administrative credentials. Once an attacker gains entry, they may copy entire tables containing personal identifiers and authentication data before detection.
Such incidents often surface when the extracted files appear on public forums or data-sharing sites. The presence of password hashes indicates that login credentials were stored, though the strength of those hashes and any additional protections such as salting are not confirmed in this case.
About WiziShop
WiziShop operates as a French platform that enables merchants to build and run online stores. Companies in this sector collect and retain customer data to support transactions, shipping, and account management. A breach at such a service therefore places at risk the records of individuals who have purchased goods through any of the stores hosted on the platform.
The scale of 2.9 million affected records shows that even a single platform can hold personal information for a large number of users across multiple merchants.
The information in question
The reported data types include names, email addresses, phone numbers, dates of birth, physical addresses, IP addresses, and SHA-1 password hashes. These categories were explicitly named in connection with the 18 GB of exposed material.
Exact confirmation of every field present in the dataset has not been published, so the full scope of additional fields, if any, remains unconfirmed.
Why it matters
Names combined with dates of birth and addresses can support identity-verification processes or targeted social-engineering attempts. Email addresses and phone numbers increase the precision of phishing campaigns, while IP addresses may reveal locations or device patterns at the time of the records.
Password hashes, even in SHA-1 form, can be subject to offline cracking attempts. Individuals who reused those passwords on other sites face a higher likelihood of account compromise elsewhere.
If your data was in this breach
Review any accounts that share the email address or password associated with WiziShop and change those passwords if reuse is suspected. Enable multi-factor authentication on services that offer it, particularly those handling financial or personal information.
Individuals can run a free exposure scan of their email address against known breach data to determine whether their information appears in this or other documented incidents.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
MEO Data Breach (2020)NetGalley Data Breach (2020)MMG Fusion Data Breach (2020)DriveSure Data Breach (2020)Latest breaches
Read GalaxyWarden’s full analysis of the WiziShop Data Breach (2020) →
Verified breach. Breach data provided in part by Have I Been Pwned, used under CC BY 4.0.
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.