October 14, 2022 at 5:51 PM
Dr Martens, a fashion brand, hasn't paid for their data to be unencrypted. A small ask for $5000 was offered, but they declined.
Now it's being sold on here for $3000. The sale is relating to source-code, allure-reports, backend configuration and database.
Database information is from 2013 - 2022.
20GB in total!
Now it's being sold on here for $3000. The sale is relating to source-code, allure-reports, backend configuration and database.
Database information is from 2013 - 2022.
20GB in total!
UPDATE
Thread has been updated with payment logs. The database format is:
Thread has been updated with payment logs. The database format is:
"Virtual Account User Name Transaction Type Token Payment Variant Tender Reference Tax Free Offered Store Description Store and forward Shopper Statement Shopper Reference Shopper Telephone Number Shopper Name Shopper IP Shopper Email Network Token BIN Metadata Merchant Order Reference Liability Indicator Device type Funding Source IBAN Installments Issuer Delivery Date Card Number Summary Browser Card BIN PSP Reference Merchant Reference Account Store Creation Date TimeZone POS Transation Date Unique Terminal ID Value Currency Payment Method Status Raw Acquirer Response Shopper Interaction Issuer Country Shopper Country Entry Mode CVM Performed CVM Result Offline"
Sample and Screenshot
"https://qa1.uat2011.dm.projecta.com" redirects to the Dr Martens website, as shown here in this config file.
Customer shipping information, site-wide.
"https://qa1.uat2011.dm.projecta.com" redirects to the Dr Martens website, as shown here in this config file.
Customer shipping information, site-wide.
Database and Source Code sample
Source Code sample download
Date Order # Customer ID D365 # Customer Email Transaction ID/Merchant Reference # PSPReference Source Refund Type Payment Type Amount Reason Code Agent Comments
8/28/2013 3:40:18 PM 1000 25 Project A Project A [email protected] 3771167615030176056428 3771167615030176056428 Full Refund Visa 124,50 € France User 8/22/2013 1:47:10 PM France User - User submitted return \\ 8/28/2013 3:19:52 PM France User - Full Refund - Testing Refund \\ 8/28/2013 3:21:42 PM France User - Full Refund - yup, yup \\ 8/28/2013 3:21:57 PM France User - Full Refund - test \\ 8/28/2013 3:39:38 PM France User - Full Refund - yup \\ 8/28/2013 3:40:31 PM France User - Full Refund - test
9/4/2013 3:27:05 PM 00153001 fabc6b0d-1d75-4a82-9654-9594ff33014f Shine Mathew [email protected] 5NJ65603AY089010B 5NJ65603AY089010B Full Refund Paypal 110,00 € France User 9/4/2013 3:27:08 PM France User - Ad-Hoc Refund - Too small \\ 9/4/2013 3:27:49 PM France User - Email To Client - This is a test \\ 9/4/2013 3:28:15 PM France User - http://repairmyfootwear.dev.projecta.com/ http://repairmyfootwear.dev.projecta.com/http://repairmyfootwear.dev.projecta.com/http://repairmyfootwear.dev.projecta.com/http://repairmyfootwear.dev.projecta.com/http://repairmyfootwear.dev.projecta.com/http://repairmyfootwear.dev.projecta.com/http://repairmyfootwear.dev.projecta.com/http://repairmyfootwear.dev.projecta.com/http://repairmyfootwear.dev.projecta.com/http://repairmyfootwear.dev.projecta.com/http://repairmyfootwear.dev.projecta.com/http://repairmyfootwear.dev.projecta.com/http://repairmyfootwear.dev.projecta.com/http://repairmyfootwear.dev.projecta.com/
9/5/2013 10:50:50 AM 5001000 fabc6b0d-1d75-4a82-9654-9594ff33014f Shine Mathew [email protected] 08c56e88-edd2-4783-9af1-a8a3c5e7ee1d 08c56e88-edd2-4783-9af1-a8a3c5e7ee1d Full Refund VISA 99,00 € France User 9/5/2013 10:33:03 AM France User - Full Refund - test \\ 9/5/2013 10:43:54 AM France User - Full Refund - test \\ 9/5/2013 10:50:52 AM France User - Full Refund - teste \\ 9/5/2013 12:22:23 PM France User - Receipt resent to customer
9/5/2013 5:31:37 PM 888 24 Tester Test 3 [email protected] 234567ETYT 234567ETYT Full Refund Visa 124,50 € France User 8/22/2013 1:46:51 PM France User - User called and asked about refund \\ 8/22/2013 1:47:00 PM France User - Called User \\ 8/27/2013 1:07:14 PM France User - Full Refund - testing the refund and notes \\ 8/27/2013 1:18:05 PM France User - Ad-Hoc Refund - Only parts need to come back \\ 8/27/2013 1:47:38 PM France User - Ad-Hoc Refund - Only parts need to come back \\ 8/27/2013 1:50:20 PM France User - Void - test \\ 8/27/2013 1:50:33 PM France User - Force Void - yes \\ 8/27/2013 2:20:21 PM France User - Receipt resent to customer \\ 8/27/2013 2:20:38 PM France User - Receipt resent to customer \\ 8/27/2013 2:20:39 PM France User - Receipt resent to customer \\ 8/27/2013 2:20:40 PM France User - Receipt resent to customer \\ 8/27/2013 2:20:40 PM France User - Receipt resent to customer \\ 8/27/2013 2:20:40 PM France User - Receipt resent to customer \\ 8/27/2013 2:20:41 PM France User - Receipt resent to customer \\ 8/27/2013 2:20:41 PM France User - Receipt resent to customer \\ 8/27/2013 2:21:38 PM France User - Receipt resent to customer \\ 8/27/2013 2:25:24 PM France User - Receipt resent to customer \\ 8/27/2013 2:25:26 PM France User - Receipt resent to customer \\ 8/27/2013 2:25:26 PM France User - Receipt resent to customer \\ 8/27/2013 2:25:27 PM France User - Receipt resent to customer \\ 8/27/2013 2:25:27 PM France User - Receipt resent to customer \\ 8/27/2013 2:25:27 PM France User - Receipt resent to customer \\ 8/27/2013 2:25:27 PM France User - Receipt resent to customer \\ 8/27/2013 2:25:28 PM France User - Receipt resent to customer \\ 8/27/2013 2:25:28 PM France User - Receipt resent to customer \\ 8/27/2013 2:25:28 PM France User - Receipt resent to customer \\ 8/27/2013 2:25:28 PM France User - Receipt resent to customer \\ 8/27/2013 2:25:28 PM France User - Receipt resent to customer \\ 8/27/2013 2:25:28 PM France User - Receipt resent to customer \\ 8/27/2013 2:27:11 PM France User - Receipt resent to customer \\ 8/27/2013 2:27:35 PM France User - Receipt resent to customer \\ 8/27/2013 2:29:04 PM France User - Receipt resent to customer \\ 8/27/2013 2:47:47 PM France User - Email To Client - Testing customer email \\ 8/28/2013 2:56:50 PM France User - Full Refund - This is a full refund \\ 8/28/2013 2:57:56 PM France User - Full Refund - This is a full refund \\ 8/28/2013 2:58:06 PM France User - Full Refund - This is a full refund \\ 8/28/2013 2:59:08 PM France User - Full Refund - This is a full refund \\ 8/28/2013 2:59:32 PM France User - Full Refund - This is a full refund \\ 8/28/2013 2:59:54 PM France User - Full Refund - This is a full refund \\ 8/28/2013 3:07:51 PM France User - Full Refund - test \\ 8/28/2013 3:08:34 PM France User - Full Refund - test \\ 8/28/2013 3:09:39 PM France User - Full Refund - test \\ 8/28/2013 3:11:01 PM France User - Full Refund - test \\ 8/28/2013 3:12:13 PM France User - Full Refund - test \\ 8/28/2013 3:17:31 PM France User - Full Refund - test \\ 9/5/2013 10:31:14 AM France User - Full Refund - Because this person shouldn't have to pay for shoes.
9/5/2013 5:32:12 PM 5001003 fabc6b0d-1d75-4a82-9654-9594ff33014f Shine Mathew [email protected] f6149c12-4ca3-4a9d-b951-490cfc595f63 f6149c12-4ca3-4a9d-b951-490cfc595f63 Full Refund VISA 99,00 € France User 9/5/2013 10:31:49 AM France User - Full Refund - he deserves it.
9/5/2013 5:35:19 PM 5001001 79aa7f5e-9f21-4cbc-bc99-f6616495edbc rulls muack [email protected] c5cfc596-0a8d-46fc-98f9-6bd55da42722 c5cfc596-0a8d-46fc-98f9-6bd55da42722 Full Refund VISA 110,00 € France User 9/5/2013 10:34:57 AM France User - Ad-Hoc Refund - refunding via ad/hoc
9/10/2013 11:27:32 AM 00000016 65ee7818-e353-489d-91a2-657a56f0fc06 Kristi Wirebaugh [email protected] 3784038253160178147626 3784038253160178147626 Full Refund VISA 200,00 € France User 9/5/2013 11:08:43 AM France User - Receipt resent to customer \\ 9/5/2013 11:09:26 AM France User - Email To Client - You stink. Source Code sample download
Buyer info - SELLING ONE TIME
You can purchase here at Sellix (csv files)
To purchase the source code, please PM me on site.
~ Lone Serbian
~ Lone Serbian
Covering up the breach
A technology journalist was reached out by Dr Martens and was told "@drmartens told me this information is "test data taken from a third party who was conducting a testing process, and it does not contain any customer data, or indeed information posing operational risk to the company."
If it did not contain any user customer data, then why is there a 1K sample of refunds from this month?
Added new sample to payment offers & updated 1K user refund sample
