Globally operated cosmetics company, Yves Rocher, experienced a large scale data leak after an unprotected database exposed the personal information of millions of Canadian customers. Included in the data was company insights, future promotions, customer information and other valuable data that could all be used against the company by competitors and even bad actors. The compromised data also included employee credentials from a previous data breach where information could be modified or deleted.
This represents a significant data breach with detailed information that can ultimately lead to a disastrous outcome for the company and its customer base. Dark Web monitoring may help those affected by the breach but more critical costs and damages are sure to lie in wait for Yves Rocher. With detailed information such as business practices and customer mined data being exposed, safeguarding data turns from a cyber security issue to a major board room discussion with a heightened sense of urgency that will greatly affect the bottom line for some time to come.