In Spring 2021, Fintech DivideBuy informed customers that it had experienced a data breach. In a letter sent to customers In March, DivideBuy said:
“Unfortunately, I am writing to you to let you know that earlier this week we discovered that DivideBuy and its customers (including you) have been the victims of a cyber incident, which involved some of your personal data being accessed. I wanted to write to you as soon as I could, to let you know what we have discovered so far, and how we are going to protect you against any consequences of this attack.”
DivideBuy is an interest-free credit provider. The company’s eCommerce plugin integrates seamlessly with platforms such as Shopify, WooCommerce, Magento, and Craft Commerce. Scant information has been released regarding how the DivideBuy breach happened, who was responsible, or when it took place. But here is what we know about this case so far.
Personal data was exposed in the DivideBuy data breach
DivideBuy confirmed in an email to customers that the data breach potentially exposed the following personal information:
- Full names
- Dates of birth
- Home addresses
- Telephone numbers
- Email addresses
- Associated aliases
- Certain credit report information
While the hackers did not access any bank account or credit card information, lawyers believe the exposed personal details could still be used by cybercriminals to impersonate individuals, commit identity theft, or target victims with sophisticated phishing schemes. This type of data is often enough to trick victims into divulging additional sensitive information, such as account credentials or financial details, which could lead to further fraud or financial losses.
Upon discovering the breach, DivideBuy collaborated with external security specialists to ensure customer data was protected and to prevent future incidents. As part of its response, the company offered a 12-month subscription to TrueIdentity, a credit monitoring service, for all impacted individuals. This service helps users monitor their credit files for unusual or suspicious activity.
Can you make a DivideBuy data breach claim?
If DivideBuy informed you that your personal data was involved in this breach, you could be due compensation.
Join the Claim connects consumers with SRA-regulated lawyers. Visit the claim page to check your eligibility if a claim is open with one of our trusted legal partners. If a group action has not yet been launched, you can register your interest and we’ll keep you informed if a partner firm decides to take a claim forward.
