Hello Kitty has suffered a data breach that has exposed the account information of 3.3 million.
The children’s toys company is the latest victim of a cyberattack that may have given hackers access to personal information. However, there is no evidence that any data has been stolen.
A spokesman for Snario Digital
— the Japanese owner of the Hello Kitty brand — said it fixed a hole after being notified by security researcher Chris Vickery that personal information of its users was compromised.
However, the database had been exposed for a month.”It would have been extremely easy for a bad guy to take the data,” he said. “Extremely easy. Almost as easy as downloading a web page.”
The names, ages and gender of 3.3 million fans was compromised and all accounts belonged to users of the SanrioTown.com website, a community for fans of Hello Kitty.
No credit card or other payment information was included in the vulnerable data, and passwords “were securely encrypted,” according to the statement.
Hello Kitty does not allow minors to sign up on the website but this restriction was purely based on an honor system.
More From InvestorPlace:
