PharmaCosmetica

In October 2023 the Russian online beauty retailer PharmaCosmetica suffered a significant data breach. The incident resulted in the exposure of approximately 800 thousand customer records and 1.8 million order entries. The leaked information includes personal identities and contact details along with delivery addresses and purchase histories. Security analysis revealed that passwords were stored using the weak MD5 hashing algorithm without salt making them highly vulnerable to cracking. This event follows reports of a previous security incident affecting the same platform a year prior. While the full database was identified the public availability varies with around 100 thousand records circulating in open forums.