BeYoung.in Data Breach Exposes 5.5 Million Customer Records

March 2025 – A Major Data Breach Hits Indian Fashion Retailer BeYoung.in

BeYoung.in, one of India’s leading online shopping platforms for trendy clothing, has suffered a massive data breach. A user going by the alias @Satanic has leaked the database on BreachForums, exposing sensitive customer information.

Details of the Breach

According to the leaked information, the breach compromised over 5.5 million customer records and orders, with the full database containing approximately 25 million lines of data. The database includes sensitive customer details such as:

• Customer Names
• Email Addresses
• Phone Numbers
• Cart Amounts
• Device Information
• Order Details
• Feedback Data

Affected Data Tables

According to posted information, the breach includes the following exposed tables:

1. Customers Table

Contains records of abandoned shopping carts, including personally identifiable information (PII):

INSERT INTO `abandonedcustomers` (`id`, `name`, `email_id`, `phone`, `customer_id`, `cart_amount`, `datetime`, `last_update_datetime`, `unique_id`, `cust_type`, `device_type`, `source_type`, `device_token`)

2. Feedback Table

Contains customer feedback data, including addresses and order details:

INSERT INTO `dlvry_fedbck_cust` (`id`, `name`, `email_id`, `phone`, `cart_amount`, `address`, `datetime`, `order_id`, `orders_id`, `device_type`, `last_update_datetime`)

3. Emails Table

Contains transactional and marketing emails sent to customers, including email metadata:

INSERT INTO `emails` (`id`, `from_email`, `to_email`, `status`, `sent_date`, `send_by`, `subject`, `description`, `order_id`, `orders_id`, `abandonedcustomers_id`, `template_id`, `email_sms_schedule_id`, `new_type`, `add_type`, `error`, `msg`, `to_phone`, `unique_id`, `message_id`, `open_email_datetime`, `open_email`, `dlvry_fedbck_cust_id`, `customer_birthday_data_id`, `custom_cust_id`, `subscribed_cust_id`, `ord_confrm_id`, `wishlist_cust_id`, `login_cust_id`) 

Implications of the Breach

This breach raises serious concerns about the security practices of BeYoung.in and the safety of its customers’ personal data. The leaked information can be exploited for:

• Identity Theft: Hackers can use customer PII for fraud and phishing attacks.
• Scam and Spam Attacks: Attackers may send malicious emails or SMS messages targeting BeYoung customers.
• Financial Fraud: Exposed order and payment data could be leveraged for fraudulent transactions.

What Should Affected Customers Do?

If you are a customer of BeYoung.in, take the following steps to protect yourself:

1. Change Your Passwords: Update your BeYoung.in password and any accounts that use the same credentials.
2. Monitor Your Emails and Messages: Be cautious of suspicious emails or messages pretending to be from BeYoung.in.
3. Enable Two-Factor Authentication (2FA): If BeYoung.in offers it, enable 2FA for added security.
4. Report Suspicious Activity: If you notice unauthorized transactions or emails, report them to the appropriate authorities.

Company’s Response

As of now, BeYoung.in has not issued an official statement regarding the breach.

Conclusion

The BeYoung.in breach is yet another reminder of the importance of cybersecurity in the e-commerce industry. With millions of customers affected, companies must prioritize security to protect user data from malicious actors. Customers, too, must remain vigilant and take necessary precautions to safeguard their personal information.

Stay tuned for further updates on this developing story.