Adobe discloses Magento Marketplace data breach

The e-commerce platform was taken offline after a hacker accessed customer data and commercial information

The personal information of customers and sellers with the Magenta Marketplace has been compromised after a third-party exploited a flaw in the Adobe-owned e-commerce platform.

Last week, an "unauthorised third-party" gained access to user data such as username, name, email address, billing and shipping address information, billing and shipping phone number, and some commercial information.

Both Magenta Marketplace customers and developers were affected by the breach, according to an Adobe message distributed to users, although the number of those hit has not been disclosed.

"On November 21, we became aware of a vulnerability related to Magento Marketplace," the firm confirmed. 

"We temporarily took down the Magento Marketplace in order to address the issue. The Marketplace is back online. This issue did not affect the operation of any Magento core products or services.

"We take these issues seriously and are committed to helping ensure our platforms are secure. We are reviewing our processes to help prevent these types of events from occurring in the future."

Related Resource

Application security fallacies and realities

Web application attacks are the most common vulnerability, so what is the truth about application security?

Download now

Adobe confirmed the vulnerability that allowed the hacker to access Magento Marketplace data was fixed when it took the site offline to address the issue. The company added no financial data, including payment card information, or passwords were accessed.

The Magento Marketplace is a platform that offers online shopping sites a set of extensions, themes, and partner opportunities for their e-commerce sites built on the open-source Magento platform. Written in PHP, Magento is one of the most widely-used e-commerce platforms used by businesses.

Adobe acquired the platform for $1.68 billion last year, with a view to taking on competitors in the enterprise marketing space including the likes of SAP and Salesforce. This purchase was shortly followed by the $4.75 billion acquisition of B2B marketing cloud platform Marketo.

IT Pro approached Adobe for more details surrounding the data breach, including which security changes it's since implemented.

Featured Resources

Unleashing the power of AI initiatives with the right infrastructure

What key infrastructure requirements are needed to implement AI effectively?

Download now

Achieve today. Plan tomorrow. Making the hybrid multi-cloud journey

A Veritas webinar on implementing a hybrid multi-cloud strategy

Download now

A buyer’s guide for cloud-based phone solutions

Finding the right phone system for your modern business

Download now

The workers' experience report

How technology can spark motivation, enhance productivity and strengthen security

Download now

Recommended

Global ransom DDoS extortionists are retargeting companies
distributed denial of service (DDOS)

Global ransom DDoS extortionists are retargeting companies

22 Jan 2021
BEC scammers are using Google Forms to identify easy victims
phishing

BEC scammers are using Google Forms to identify easy victims

21 Jan 2021
FBI warns of ongoing corporate vishing attacks
phishing

FBI warns of ongoing corporate vishing attacks

19 Jan 2021
Hackers using COVID vaccine as a lure to spread malware
hacking

Hackers using COVID vaccine as a lure to spread malware

15 Jan 2021

Most Popular

How to move Windows 10 from your old hard drive to SSD
operating systems

How to move Windows 10 from your old hard drive to SSD

21 Jan 2021
WhatsApp could face €50 million GDPR fine
General Data Protection Regulation (GDPR)

WhatsApp could face €50 million GDPR fine

25 Jan 2021
How to recover deleted emails in Gmail
email delivery

How to recover deleted emails in Gmail

6 Jan 2021