Alleged Sale of Admin Access to Frank & Co. Jewellery

Keypoints

• The threat actor “menksoaawd” posted a listing offering admin-level access to Frank & Co.’s backend system.
• The compromised data includes over 300,000 customer records with personal and account details.
• The seller claims the data is sourced directly from the company’s production environment, with no public leaks.
• The access includes capabilities such as password resets and record editing, posing a significant security risk.
• This event underscores the importance of securing customer data in high-end retail businesses.