Lookbook Fashion Platform Exposes Over 1 Million User Records in 2012 Breach
What Happened
In August 2012 the fashion‑focused website lookbook.nu suffered a data breach that compromised 1,074,948 user accounts. The stolen data—later listed for sale in 2016—included usernames, email addresses, dates of birth, IP addresses, plaintext passwords and site‑activity details.
Why It Matters for Compliance & Audit Readiness
- Demonstrates the need for continuous credential‑security controls (e.g., password hashing, MFA) that can be audited and evidenced over time.
- Highlights the importance of a documented breach‑response workflow that captures detection, containment, and notification steps for regulator‑ready reporting.
- Reinforces the value of periodic third‑party risk assessments that verify a vendor’s data‑protection posture before onboarding or renewal.
Who Is Affected
- Fashion and lifestyle online platforms
- Any service that stores personally identifiable information (PII) and authentication credentials
- Users of lookbook.nu (global consumer base)
Recommended Actions
- Review any integrations or data feeds that rely on Lookbook credentials and rotate passwords or API keys.
- Validate that your monitoring stack logs authentication anomalies (failed logins, credential stuffing) and that alerts are retained for audit.
- Request a detailed incident‑response report from Lookbook (or its successor) to confirm remediation steps and evidence of corrective controls.
Technical Notes
- Attack vector: Likely credential theft via insecure password storage (plaintext) and possible exposure of database backups.
- CVEs: None reported specific to this breach.
- Data types exposed: Dates of birth, email addresses, IP addresses, full names, plaintext passwords, usernames, website activity logs.
Source: https://haveibeenpwned.com/api/v3/breach/Lookbook