Fivot says IDARE cashless service breached, exposing data of 129,659 users
Written by AI from 1 report listed below. Not checked by a person before publication. How we use AI
Fivot announced on 13 October that a third party accessed its cash‑less service IDARE fraudulently.
The breach exploited a vulnerability in external software used for customer support and data was extracted repeatedly between 10 August and 27 September, affecting 129,659 users registered by that date, including former members. Leaked information comprised phone numbers, email addresses, birth dates, user IDs, display names, account settings, status, balance, transaction history, IDARE card holder name and expiry, as well as some users’ names, addresses, gender, purpose of use, ID verification document numbers, partial card and bank details, and real card activation codes, while login passwords, full card numbers, security codes, PINs, full credit‑card numbers, expiry dates and My Number data were not leaked.