Seiko USA website defaced as hacker claims customer data theft

Published:

20 april 2026 om 18:22:31

Alert date:

20 april 2026 om 19:02:30

Source:

bleepingcomputer.com

Data Breach & Exfiltration, Web Technologies

The Seiko USA website was defaced over the weekend by attackers who claim to have stolen customer data from the company's Shopify database. The hackers displayed a defacement message on the website threatening to leak the stolen customer information unless a ransom is paid. This incident represents a website defacement attack combined with alleged data theft and ransomware demands targeting a major watch manufacturer's US operations.

Technical details

Attackers defaced the Seiko USA website's Press Lounge section, replacing content with a ransom demand claiming they breached the company's Shopify backend and exfiltrated the entire customer database. The defaced page displayed 'HACKED' title and demanded ransom payment within 72 hours or the stolen data would be published. The attackers provided specific instructions to locate customer account ID 8069776801871 in the Shopify admin panel for contact purposes.

Mitigation steps:

Organizations using Shopify should review their security configurations, monitor for unauthorized access to admin panels, implement website defacement monitoring, and establish incident response procedures for ransom demands. Regular security assessments of e-commerce platforms should be conducted.

Affected products:

Seiko USA website
Shopify store backend