Introduction

In one of the largest e-commerce data breaches of 2025 so far, rollernco.com has suffered a massive leak of its customer database. A 314MB SQL file surfaced online, exposing sensitive data of over 45,000 users and 1.5 million rows of customer-related information. This breach has alarmed cybersecurity experts and raised questions about the site’s internal security posture.

Table of contents

• Introduction
• Breakdown of the Data Leak
  • What Was Exposed in the SQL Dump?
  • Format and Scale of the Leak
• Security Risks and User Impact
  • Risk of Identity Theft and Fraud
  • Password Compromise and Credential Stuffing
  • Privacy Compliance and Legal Concerns
• Conclusion
• Suggestion

Breakdown of the Data Leak

What Was Exposed in the SQL Dump?

The leaked data comes from the ps_customer table of rollernco.com, indicating this breach includes sensitive personal information from their PrestaShop platform. The exposed fields include:

• First and last names
• Email addresses
• Passwords (likely hashed, but still sensitive)
• Company and SIRET info (for business customers)
• Birthdays and gender
• IP addresses tied to newsletter signups
• Account creation and update timestamps
• Secure keys and password reset tokens

Format and Scale of the Leak

SQL File Format

The data was formatted as an SQL INSERT INTO statement — a clear sign that a full database dump occurred. This format is often used by attackers for database replication or resale on dark web marketplaces.

File Size and Volume

• File Size: 314MB
• Total Users: ~45,000
• Total Rows: 1.5 million+
  This isn’t just a minor leak — it’s an extensive breach with potential ripple effects.

Security Risks and User Impact

Risk of Identity Theft and Fraud

Exposed emails, names, and birthdates can be used for spear phishing, identity theft, and fraudulent account creation. Business-related data (like company names and tax IDs) could also be exploited in B2B scams.

Password Compromise and Credential Stuffing

Even if passwords are hashed, weak or outdated hashing algorithms can be cracked. If users have reused passwords across platforms, attackers could gain access to other accounts.

Privacy Compliance and Legal Concerns

Given rollernco.com’s customer base spans international regions, including the EU, this breach could result in GDPR penalties or investigations by data protection authorities.

Conclusion

The rollernco.com database leak is a serious cybersecurity event in 2025, revealing just how vulnerable even well-known e-commerce platforms can be. With 1.5 million rows of customer data exposed in a public .SQL file, the impact on user trust, legal standing, and brand reputation could be long-lasting.

Suggestion

• For Customers:
  • Change your password on rollernco.com and any other site where you’ve used the same credentials.
  • Be cautious of emails or messages claiming to be from the company.
  • Monitor your accounts and credit reports for unusual activity.
• For Businesses:
  • Review your supply chain or vendor relationships tied to rollernco.com.
  • Audit your user permissions and credentials.
• For rollernco.com:
  • Issue an official breach notification to affected users.
  • Reset all passwords and invalidate tokens.
  • Work with cybersecurity experts to identify and patch vulnerabilities.

Introduction

A recent data breach has rocked the e-commerce platform q-depot.com, resulting in the unauthorized exposure of thousands of user records. Cybersecurity analysts have discovered that critical user data — including names, contact information, email addresses, and encrypted passwords — was leaked via a public SQL dump. The incident raises serious concerns over data protection protocols and customer privacy on online retail platforms.

Table of contents

• Introduction
• What Happened at q-depot.com?
  • The Database Structure and Leak Format
  • Sensitive Data at Risk
• Impact on Users and Platform Security
  • Customer Trust at Stake
  • Platform Security Gaps
• Conclusion
• Suggestion

What Happened at q-depot.com?

The Database Structure and Leak Format

The leaked data was presented in the form of an SQL INSERT statement, revealing key user attributes stored in the platform’s users table. The structure exposed included:

1. Full names (first name and surname)
2. Email addresses and verification timestamps
3. Phone and WhatsApp numbers
4. Business-related data like VAT and subscription status
5. Encrypted passwords and tokens
6. IP addresses and user role identification
7. Timestamps of account creation and updates

This kind of structured data exposure points toward an internal compromise or misconfiguration in database security policies.

Sensitive Data at Risk

Personally Identifiable Information (PII)

The breach includes highly sensitive user information, which could be exploited for phishing, identity theft, or targeted fraud. Phone numbers, email addresses, and WhatsApp details are particularly vulnerable.

Encrypted Passwords and Tokens

While the passwords appear encrypted, the presence of remember_token and api_token fields suggests the risk of session hijacking or API misuse if proper encryption and hashing weren’t enforced.

Business Information and Tax IDs

Exposure of tax and business information can have severe implications for vendors using q-depot.com, especially if they’re engaged in international trade.

Impact on Users and Platform Security

Customer Trust at Stake

Trust is a cornerstone for any e-commerce operation. With this leak, customers may begin questioning whether their data is safe with q-depot. It also opens the platform to possible legal consequences due to non-compliance with data protection laws like GDPR and local cybersecurity frameworks.

Platform Security Gaps

The structured nature of the dump indicates the attacker may have had backend or database-level access, suggesting potential lapses in access control, network security, or internal policies.

Conclusion

The data leak at q-depot.com is a stark reminder of how vital it is for digital platforms to enforce strong security measures. From database encryption and access control to regular audits and incident response plans, companies must take every step to secure user data. While q-depot.com has yet to issue an official statement, users are advised to change their passwords, monitor accounts for suspicious activity, and stay alert for phishing scams.

Suggestion

• For Users: Immediately change your q-depot password and any similar credentials used on other platforms. Enable two-factor authentication wherever possible.
• For Businesses: Perform a risk audit if you’ve interacted with q-depot recently. Monitor financial statements and digital communications.
• For q-depot.com: Publicly acknowledge the breach, reset user credentials, notify affected individuals, and involve cybersecurity experts to investigate and patch the vulnerabilities.

Introduction

On August 28, 2024, a significant data breach involving Aptekanevis.ru, a Russian online pharmacy, was reported. A user named “anonmoose” leaked the data on Breach Forum, exposing a wealth of sensitive user information. The breach has raised serious concerns about the security of personal and professional data, and the potential impact on thousands of users.

Table of contents

• Introduction
• Scope of the Aptekanevis.ru Data Breach
  • Breakdown of the Leaked Data
  • Risks Associated with the Aptekanevis.ru Data Breach
  • How Users Can Protect Themselves
• Conclusion
• Suggestion

Scope of the Aptekanevis.ru Data Breach

The Aptekanevis.ru breach resulted in the leak of personal and professional data, which included information like login credentials, personal identification details, and contact information. The scope of the leaked data is extensive, and the breach has the potential to cause severe damage to the privacy and security of users.

Breakdown of the Leaked Data

The leaked data includes the following fields:

• ID: Unique identifier for the user.
• LOGIN & PASSWORD: Usernames and passwords, providing access to the accounts.
• NAME & LAST_NAME: Full names of the users.
• EMAIL: Email addresses of users.
• PERSONAL INFORMATION: Data such as birthdate, phone numbers (mobile, fax, pager), home addresses (street, city, state, country, ZIP), and other personal details.
• WORK INFORMATION: Company details, department, position, business phone numbers, and business addresses.
• TIMESTAMP_X & LAST_LOGIN: Information about when the users last accessed their accounts.
• SECURITY FIELDS: Fields like CHECKWORD, STORED_HASH, XML_ID, CONFIRM_CODE, and PASSWORD_EXPIRED which could be used for password recovery or hacking attempts.

Risks Associated with the Aptekanevis.ru Data Breach

This data leak poses several potential risks:

• Identity Theft: With full names, email addresses, and personal identification details like birthdate and contact information, criminals could steal identities.
• Account Takeover: With leaked login credentials, hackers can access user accounts, potentially making unauthorized purchases or accessing private health information.
• Phishing Attacks: The exposed data makes it easier for cybercriminals to send targeted phishing emails, impersonating trusted entities to steal further information or compromise accounts.
• Workplace Intrusion: Users’ professional information, such as their work phone and position, could be exploited for business-related fraud or social engineering attacks.

How Users Can Protect Themselves

If you are a user of Aptekanevis.ru or fear you may be affected by this breach, it’s essential to take immediate action:

• Change Passwords: Update passwords for both Aptekanevis.ru and any other platforms where the same credentials were used.
• Enable Two-Factor Authentication (2FA): Add an extra layer of security to all accounts, particularly those related to financial or medical data.
• Monitor Financial and Health Accounts: Keep a close eye on bank accounts and any online pharmacy accounts for unauthorized activity.
• Be Alert to Phishing Scams: Beware of suspicious emails, texts, or calls asking for further information or urging you to click on unfamiliar links.

Conclusion

The data breach at Aptekanevis.ru is another wake-up call about the vulnerabilities present in online platforms that handle sensitive data. With so much personal and professional information exposed, the repercussions for affected users could be severe. This incident underlines the importance of stringent cybersecurity measures for online businesses and the need for users to remain vigilant about protecting their personal data.

Suggestion

For organizations handling sensitive personal data, it’s vital to implement stronger security measures, including encryption, regular security audits, and prompt user notification in case of a breach. Meanwhile, users must practice good cybersecurity hygiene by using strong, unique passwords, enabling two-factor authentication, and being cautious about sharing personal information online.

Introduction

In the ever-evolving landscape of cybersecurity, new threats emerge constantly, posing challenges to individuals and organizations alike. One such threat is the Rocinante Trojan, a malicious software that disguises itself as legitimate banking applications to infiltrate smartphones and compromise sensitive user data. This article delves into the details of the Rocinante Trojan, its modus operandi, and the steps users can take to protect themselves from this insidious threat.

Table of contents

• Introduction
• What is the Rocinante Trojan?
• Rocinante Trojan’s Modus Operandi
• Protecting Against the Rocinante Trojan
• Conclusion
• Suggestion

What is the Rocinante Trojan?

The Rocinante Trojan is a sophisticated piece of malware that targets Android devices. It is designed to mimic popular banking apps, luring unsuspecting users into downloading and installing the malicious software under the guise of a trusted application

1. Once installed, the Trojan gains access to a wide range of sensitive information, including login credentials, financial data, and personal details.

Rocinante Trojan’s Modus Operandi

The Rocinante Trojan employs several techniques to evade detection and successfully infiltrate its targets:

1. Masquerading as Banking Apps: The Trojan is designed to mimic the user interface and functionality of popular banking applications, making it difficult for users to distinguish between the genuine app and the malicious one1.
2. Phishing Tactics: The Trojan often uses phishing techniques to lure users into downloading the malicious app. This includes sending fake SMS messages or emails that appear to be from legitimate financial institutions1.
3. Privilege Escalation: Once installed, the Rocinante Trojan attempts to gain elevated privileges on the device, allowing it to access sensitive data and perform unauthorized actions1.

Protecting Against the Rocinante Trojan

To safeguard against the Rocinante Trojan and other similar threats, users should take the following precautions:

1. Be cautious when downloading apps: Only download applications from official app stores like Google Play Store or reputable sources1.
2. Keep devices and apps up-to-date: Regularly update your Android device and installed applications to ensure you have the latest security patches and bug fixes1.
3. Use antivirus software: Install a reliable antivirus solution on your device and keep it updated to detect and remove any malware infections1.
4. Be wary of suspicious links and messages: Avoid clicking on links or downloading attachments from unknown or suspicious sources, as they may contain malware1.

Conclusion

The Rocinante Trojan poses a significant threat to smartphone users, particularly those who rely on mobile banking apps. By masquerading as legitimate applications, the Trojan can easily infiltrate devices and compromise sensitive user data. To protect against this threat, users must exercise caution when downloading apps, keep their devices and apps up-to-date, use antivirus software, and be wary of suspicious links and messages. By taking these proactive measures, individuals can significantly reduce the risk of falling victim to the Rocinante Trojan and other similar threats.

Suggestion

To further enhance security, users should consider using a virtual private network (VPN) when accessing sensitive information or conducting financial transactions on their mobile devices. A VPN can help protect against man-in-the-middle attacks and ensure that data transmitted over the internet remains encrypted and secure.