In October 2017, researchers found two publicly accessible databases containing information on nearly two million apparent Tarte customers, including names, contact details and partial card numbers. Kromtech said it notified Tarte and the databases were taken offline; it also found a ransomware note. Tarte’s e-commerce and IT vice president said the company was investigating.
Sources
Tarte Cosmetics, a cruelty-free cosmetics brand carried by major retailers like Sephora and Ulta, exposed the personal information of nearly two million customers in two unsecured online databases.