Offerz hacked: 115,000 customers – what is known so far

TVS News AI, editorially supervised, presents Offerz hacked: 115,000 customers – what is known so far.

The Swiss online retailer Offerz has become the target of a cyberattack. As several Swiss media outlets report, citing Blick, unknown actors gained access to an inadequately secured test environment of the company during the night of October 7. In the process, order data from approximately 115,000 customers fell into their hands. ictk.ch dates the discovery to the morning of October 9 – the leak therefore went unnoticed for more than 48 hours.

If you have ordered from Offerz.ch in recent years, your order data may have fallen into the wrong hands. What is known so far, where the reports differ – and which questions remain open.

How could the attack happen?

According to the trade press, the entry point was not in the webshop's live system, but in a test environment. itmagazine.ch speaks of an "inadequately secured file," inside-it.ch confirms that order data was stored there. Anyone who stores real customer data in a test environment without protecting it as rigorously as the production system creates a vulnerability that can be exploited with relatively simple means.

The time gap is notable: the Tages-Anzeiger writes that the leak "went unnoticed for more than a day." Combined with the concrete dates – access on the night of October 7, discovery on the morning of October 9 – that amounts to roughly two days during which attackers could have exfiltrated the data.

Which data is affected – and which is not

Blick speaks of "sensitive data," Tages-Anzeiger and inside-it.ch of "order data." What exactly is contained in these records – whether only names and delivery addresses or additional fields – does not emerge from the available reports. Whether all 115,000 records were actually accessed or only a portion of them also remains open. itmagazine.ch puts it cautiously: "Whether the data will actually be misused remains unclear."

Who is behind the attack

All available sources are silent on the perpetrators, possible motives, or a ransom demand. The exact technical manner in which access to the test environment was gained – whether through stolen credentials, an open database, or another vulnerability – has not been made public. What is clear: Offerz has made the incident public itself. Both Tages-Anzeiger and finanznachrichten.de report that the company intends to inform affected customers directly.

A pattern among Swiss online retailers

The Tages-Anzeiger places the case as "another Swiss online retailer" that has become the target of a cyberattack. Which other shops were affected in recent weeks and whether there are technical or personnel links between the cases does not emerge from the available sources. But the pattern is clear: it is often not sophisticated tricks but configuration errors – such as a forgotten test environment with real data – through which attackers gain access to records they should never have seen.