Hackers leak data on nearly a million Halara customers

Data Breach
Image Credit: Shutterstock (Image credit: Shutterstock)

Hackers have leaked sensitive information on almost a million people claimed to be customers of Hong Kong-based activewear firm Halara.

A hacker under the alias Sanggiero posted a new thread on a dark net forum, and in a Telegram channel, with the details of the hack.

"In January 2024, over 1M rows of data from the store company Halara was posted to a popular hacking forum. The data contained 1M unique addressId, first name, last name, phone numbers, country, home address, zip, province, city, iso," the post allegedly reads.

Vulnerable API

Analysis of the database posted there appeared to confirm that at least some of the information posted there is accurate. For example, while the hacker claims to have information on a million people, the database contains 941,910 records. Furthermore, the hacker used an incorrect logo for Halara, posting one that belongs to an unrelated cannabis company. 

BleepingComputer did reach out to some of the people whose information was posted in the database, and confirmed that the data is correct. The publication also confirmed that the people were indeed customers of Halara.

This means that whoever takes the information could use it to craft credible-looking phishing emails, or engage in identity theft.

The company was said to be investigating the matter now. 

BleepingComputer also managed to contact Sanggiero, who claim to have stolen the data via a vulnerability in an API on the Halara website. The database isn’t of much value to them, which is why they decided to share it online for free. No contact with the victim was made, apparently. 

Halara is a sports apparel company, selling what’s known as “athleisure” clothes. It was founded in 2020, and gained huge popularity via short videos shared on TikTok.

More from TechRadar Pro

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Read more
A man looking at a tablet with a brown Best Buy package on the desk in front of him
Huge Christmas data breach - 14 million shipping records leaked, putting shoppers at risk
Cartoon Phishing
One of the largest data leaks ever sees info on 1.5 billion people leaked online
Suitcase next to a bed in a hotel
Millions of hotel users see personal info checked out in huge data leak
No broadband network
Massive online data breach sees 2.7 billion records leaked - here's what we know
ID theft
Over a million patients potentially hit after another US healthcare provider hit by cyberattack
Data leak
Top collectibles site leaks personal data of nearly a million users
Latest in Security
A stylized depiction of a padlocked WiFi symbol sitting in the centre of an interlocking vault.
Broadcom warns of worrying security flaws affecting VMware tools
URL phishing
HaveIBeenPwned owner suffers phishing attack that stole his Mailchimp mailing list
Ransomware
Cl0p resurgence drives ransomware attacks to new highs in 2025
Google Chrome
Google Chrome security flaw could have let hackers spy on all your online habits
cybersecurity
Chinese government hackers allegedly spent years undetected in foreign phone networks
Data leak
A major Keenetic router data leak could put a million households at risk
Latest in News
Xbox Series X and Xbox wireless controller set to a green background
Xbox Insiders are currently testing a new Game Hub feature that looks useful, but I've got mixed feelings about it
A stylized depiction of a padlocked WiFi symbol sitting in the centre of an interlocking vault.
Broadcom warns of worrying security flaws affecting VMware tools
Microsoft Surface Laptop and Surface Pro devices on a table.
Hate Windows 11’s search? Microsoft is fixing it with AI, and that almost makes me want to buy a Copilot+ PC
Oura Ring 4
Activity tracking on Oura Ring is about to get a whole lot better, but I've got bad news about your step count
Google Pixel Buds Pro 2
Cleaned your Pixel Buds Pro 2 recently? If not, you might be getting worse sound
Google Maps on a phone being held in someone's hand
Google Maps is getting two key upgrades, for easier route planning and quicker access to Gemini AI