Ivan Drago

🇨🇿 Alleged database belonging to Czech e-commerce giant Alza.cz has been advertised on a cybercrime forum, with the threat actor claiming to possess approximately 437,000 customer records. * Threat actor claims the dataset originates from Alza.cz * Advertised volume: ~437,000 records * Claimed data includes customer names, email addresses, phone numbers, dates of birth, mailing addresses, customer tiers, loyalty card information, and loyalty point balances * Additional records allegedly contain order history and support ticket information * Administrative support-related records are also referenced in the advertised schema * Potential Impact: * Targeted phishing campaigns against customers * Account takeover attempts using customer profile information * Loyalty program fraud and abuse * Social engineering attacks leveraging order and support history * Customer privacy and reputational risks for affected organizations * Analyst Note: The advertised structure resembles a CRM and e-commerce customer database containing contact, order, and customer service information. Several fields appear consistent with retail customer management systems; however, the authenticity of the dataset and any attribution to Alza.cz remain unverified. Independent validation is required before confirming a breach or assessing the actual scope of exposure. #DDW #Intelligence #CzechRepublic #AlzaCZ