Hackers blackmailing Domino's Pizza for a €30,000 slice of earnings

[Reefa]

Hackers are threatening to publish more than 600,000 Domino's customers' details online, if the company does not pay €30,000 by the end of Monday.

Hacking group Rex Mundi posted the demand on Twitter over the weekend, with a Pastebin link showing a snippet of the data claimed to have been stolen. At the time of publishing the link had been taken offline.

The data was reportedly stolen from the French and Belgian Domino's websites and includes customers' names, phone numbers, email and street addresses, and passwords.

We hacked the websites of @dominos_pizzafr & Domino's Belgium, and downloaded 600,000+ customer records. More info: https://t.co/KVJ1SW7UeA

— Rex Mundi (@RexMundi_Anon) June 13, 2014

It is currently unclear how the alleged breach occurred, though Rex Mundi claimed it was due to Domino's lax website security practices.

Fun fact: @dominos_pizzafr patched ONE vulnerability on their Belgian site, but left several other vulnerabilities in their code #fail

— Rex Mundi (@RexMundi_Anon) June 14, 2014

Rex Mundi has since posted regular updates on Twitter, threatening Domino's that it will release the data if it fails to deliver the cash.

Reminder to all @dominos_pizzafr customers: if the company doesn't start paying us, we will release your data tonight.

— Rex Mundi (@RexMundi_Anon) June 16, 2014

It is currently unknown what action Domino's will take, and at the time of publishing the company had not responded to V3's request for comment.

Until Domino's reacts or the data appears online it is impossible to know if Rex Mundi's claims are legitimate. If they are, Domino's will be one of many companies to suffer a data breach in recent months.

Security firm Avast revealed hackers had successfully stolen the personal details of 400,000 customers in May while eBay, Spotify and Office were all also hit.

The commonality of data breaches has led many security experts and analysts to view them as one of the biggest threats facing businesses.

Research from PwC and the UK Department for Business, Innovation and Skills (BIS) reported that each successful breach costs firms as much as £1.15m.

Source