Adobe discloses Magento Marketplace data breach

The e-commerce platform was taken offline after a hacker accessed customer data and commercial information

The personal information of customers and sellers with the Magenta Marketplace has been compromised after a third-party exploited a flaw in the Adobe-owned e-commerce platform.

Last week, an "unauthorised third-party" gained access to user data such as username, name, email address, billing and shipping address information, billing and shipping phone number, and some commercial information.

Advertisement - Article continues below

Both Magenta Marketplace customers and developers were affected by the breach, according to an Adobe message distributed to users, although the number of those hit has not been disclosed.

"On November 21, we became aware of a vulnerability related to Magento Marketplace," the firm confirmed. 

"We temporarily took down the Magento Marketplace in order to address the issue. The Marketplace is back online. This issue did not affect the operation of any Magento core products or services.

"We take these issues seriously and are committed to helping ensure our platforms are secure. We are reviewing our processes to help prevent these types of events from occurring in the future."

Related Resource

Application security fallacies and realities

Web application attacks are the most common vulnerability, so what is the truth about application security?

Download now

Adobe confirmed the vulnerability that allowed the hacker to access Magento Marketplace data was fixed when it took the site offline to address the issue. The company added no financial data, including payment card information, or passwords were accessed.

Advertisement
Advertisement - Article continues below

The Magento Marketplace is a platform that offers online shopping sites a set of extensions, themes, and partner opportunities for their e-commerce sites built on the open-source Magento platform. Written in PHP, Magento is one of the most widely-used e-commerce platforms used by businesses.

Advertisement - Article continues below

Adobe acquired the platform for $1.68 billion last year, with a view to taking on competitors in the enterprise marketing space including the likes of SAP and Salesforce. This purchase was shortly followed by the $4.75 billion acquisition of B2B marketing cloud platform Marketo.

IT Pro approached Adobe for more details surrounding the data breach, including which security changes it's since implemented.

Featured Resources

Preparing for long-term remote working after COVID-19

Learn how to safely and securely enable your remote workforce

Download now

Cloud vs on-premise storage: What’s right for you?

Key considerations driving document storage decisions for businesses

Download now

Staying ahead of the game in the world of data

Create successful marketing campaigns by understanding your customers better

Download now

Transforming productivity

Solutions that facilitate work at full speed

Download now
Advertisement

Recommended

Visit/security/ethical-hacking/356252/poorly-secured-banking-apps-lead-to-cyber-threats
ethical hacking

Mobile banking apps are exposing user data to attackers

26 Jun 2020
Visit/security/malware/356231/most-malware-came-through-https-connections-in-q1-2020
malware

Most malware came through HTTPS connections in Q1 2020

25 Jun 2020
Visit/security/phishing/356211/phishing-attacks-target-unsuspecting-wells-fargo-customers
phishing

Phishing attacks target unsuspecting Wells Fargo customers

24 Jun 2020
Visit/security/hacking/356210/trump-administration-wants-to-enhance-the-security-of-gov-sites
hacking

Trump administration wants to enhance the security of .gov sites

24 Jun 2020

Most Popular

Visit/mobile/google-android/356373/over-2-dozen-additional-android-apps-found-stealing-user-data
Google Android

Over two dozen Android apps found stealing user data

7 Jul 2020
Visit/laptops/29190/how-to-find-ram-speed-size-and-type
Laptops

How to find RAM speed, size and type

24 Jun 2020
Visit/cloud/356260/the-road-to-recovery
Sponsored

The road to recovery

30 Jun 2020