Slickwraps slickwraps.com Slickwraps data breach: what happened and what to do
In February 2020, Slickwraps, an online store for phone skins and wraps, had customer data exposed. Have I Been Pwned counts about 858,000 email addresses, with names, physical addresses, phone numbers and purchase histories.
View all 13,115 breaches- Breach date
- 16 Feb 2020
- Affected
- 857,611
- Data exposed
- Email addresses, Names, Phone numbers, Physical addresses, Purchases
- Verified
- Yes
- Last updated
Source: Have I Been Pwned (CC BY 4.0)
What happened
In February 2020, Slickwraps suffered a data breach. Customer data in some of its non-production databases was exposed through an exploit. The company said the databases were closed after it learned of the exposure, and it recommended that customers reset their passwords and watch for phishing.
What was exposed
Have I Been Pwned counts 858,000 unique email addresses across customer records and newsletter subscribers. Besides email addresses, the data included names, physical addresses, phone numbers and purchase histories. Slickwraps said passwords and financial data weren't in the exposed databases.
What it means for you
A name, address, phone number and a list of what you bought is a good script for a scammer. Expect fake order, delivery or refund messages that mention Slickwraps or a product you actually ordered.
How to tell a real message from a scam
A genuine company message won't ask for your password, a card number or a gift card code. If a message about an order you don't remember pushes you to act fast, treat it as a scam, and open the retailer's site yourself instead of using the link. Slickwraps said guest checkouts weren't affected, so people who only ever checked out as a guest are less likely to be in the data.
What to do if you were in it
- 1
Expect phishing that mentions the breach
Emails, texts and calls that use your real details look convincing. Don't click links in unexpected messages; go to the company's site yourself.
- 2
Reset your Slickwraps password, and any copy of it
The company recommended a reset. If you reused that password elsewhere, change it there too and turn on two-factor login.
- 3
Check whether your email or phone is in this and other breaches
Run a free Serus scan. Serus monitors breach databases and the dark web for your email, phone and other details and alerts you when they show up in a new leak.
Frequently asked
Was I affected by the Slickwraps breach?
If you had a Slickwraps account or subscribed to its newsletter around 2020, possibly. Search your email on Have I Been Pwned or run a free Serus scan.
What was exposed?
Email addresses, names, physical addresses, phone numbers and purchase histories.
Should I change my password?
Slickwraps said passwords weren't exposed, but the company still recommended a reset. Do it, and change any account that shares the password.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
