Slickwraps Breach Exposes 857,611 Customer Records Including Personal and Purchase Data
What Happened – In February 2020 the online retailer Slickwraps suffered a data breach that exposed 857,611 unique records. The compromised data set includes email addresses, names, phone numbers, physical addresses and detailed purchase histories.
Why It Matters for Trust & Control Assurance
- This incident illustrates a classic failure to maintain continuous evidence of data‑handling controls and consent records—exactly what a control‑assurance program is built to monitor.
- Demonstrable, auditable privacy controls (e.g., consent capture, DSAR readiness) provide the defensible trail regulators and auditors expect after a breach of personal data.
- Leveraging a privacy‑focused capability such as CookiePLUS helps organizations map consent, enforce data‑minimisation, and generate real‑time compliance evidence.
Who Is Affected – Retail/e‑commerce operators handling consumer‑level personal data and the customers whose information was exposed.
Recommended Actions
- Conduct an immediate gap analysis of consent capture and data‑retention policies against the exposed data fields.
- Collect and preserve evidence of privacy controls (e.g., consent logs, DSAR processes) for audit readiness.
- Deploy continuous monitoring of data‑exposure controls and update incident‑response playbooks to include privacy‑specific steps.
Source: Have I Been Pwned – Slickwraps Breach
Technical Notes – The breach involved email addresses, names, phone numbers, physical addresses and purchase histories. No specific vulnerability or attack vector was disclosed. Source: Have I Been Pwned – Slickwraps Breach