Poshmark Investigates Data Breach Exposing 50 Million User Profiles
Online clothing marketplace Poshmark confirms an unauthorized third party accessed user profile details, though financial data remains secure. The company is actively investigating the incident with outside experts.
Online clothing marketplace Poshmark confirms that an unauthorized third party accesses profile information belonging to its 50 million users. The compromised data includes names, usernames, gender, city locations, email addresses, size preferences, and internal notification settings. Fortunately, the company states that financial data and physical addresses remain completely secure during this incident.
The company highlights that the exposed passwords receive protection through the bcrypt hashing algorithm, which stands as one of the strongest encryption methods available today. In response to the intrusion, Poshmark retains outside forensics firm Kroll to conduct a thorough investigation and implements unspecified enhanced security measures across its platform.
Poshmark reports the breach to law enforcement authorities but intentionally bypasses state regulators because the compromised information does not involve financial records. This security event adds to a growing list of recent data exposures affecting major online platforms, highlighting the ongoing challenges of protecting vast amounts of user information.