Incident Overview

A threat actor going by Wadjet is claiming to sell customer data from SkiWebShop, a Dutch online retailer specializing in ski and winter sports gear. The listing includes 81,436 unique email addresses and 70,020 unique phone numbers, with the data covering customers across multiple European countries.

The breakdown by country shows the Netherlands making up the largest portion at 48,930 records, followed by Germany with 16,792, Belgium with 6,910, Poland with 2,272, the United Kingdom with 1,482, and Austria with 1,193. The dataset contains detailed billing information including full names, phone numbers, street addresses, cities, postcodes, regions, country IDs, VAT IDs, and company names, along with account-level fields like dates of birth, gender, email confirmation status, and account creation details.

The threat actor has posted a redacted sample and is accepting escrow for the transaction, suggesting they are open to negotiated pricing through the forum's built-in escrow service.