The breach, initially disclosed on November 29, exposed customer names, email addresses, full shipping details including apartment access codes, and partial order information.
Smart Reinforcement leverages artificial intelligence and adaptive learning to deliver personalized security education, targeting user vulnerabilities with automated training modules.
The company reports a 400% year-over-year increase in successfully phished identities, with business email addresses found in nearly 40% of recaptured records, making the workforce three times more likely to be phished than infected by malware.
The campaign, which ran from April to November 2025, utilized the open-source phishing kit Evilginx, employing an adversary-in-the-middle (AiTM) strategy.
The FBI has warned about the mounting prevalence of "virtual kidnapping" and extortion schemes, which evolves upon grandparent scams with the use of fraudulent proof-of-life photos or videos that could have been scraped from online postings of real missing person information, according to The Register.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.