Account information of 36 million Poshmark user accounts leaked online. 

On August 1, 2019, California-based social commerce marketplace Poshmark issued a security notice that unauthorized users had accessed personal data of users. The compromised user information includes usernames, first names, last names, genders, locations, email addresses, size preferences, encrypted passwords, and details of users' linked social media profiles.

As soon as the attack was detected, Poshmark hired a forensics expert to investigate and understand the extent of the breach. "The data acquired does not include any financial or physical address information, and we do not believe your password was compromised," said Poshmark on its blog post. "Regardless, we recommend that you change your password as a precaution and security best practice." Poshmark confirmed that it had reviewed its existing security systems and, with help from the cybersecurity firm,  revamped them to protect the network from such incidents in the future.

However, on September 3, 2019, the data breach notification site Have I Been Pwned received information that the details of more than 36 million customers stolen from the data breach are being sold online. 

Data breaches can be costly. Protect yourself from ransomware threats, phishing scams, brute force attacks, and DoS attacks with a comprehensive SIEM solution.  Invest in ManageEngine Log360, the tool that can help combat internal and external security attacks.