Digital gift card service Gyft has revealed details about a security breach that may have compromised personal details and gift card numbers of its customers.

The company said that from 3 October through 18 December 2015, an unknown party accessed two cloud providers used by the company without authorisation, and viewed or downloaded specific Gyft user information stored with the cloud providers.

The data accessed from the cloud providers included names, contact information, dates of birth, and gift card numbers of users, the company said, adding that gift card numbers and Gyft log-in credentials could have been breached to make unauthorised purchases.

However, the company also confirmed that the data breached has not yet been used to access Gyft accounts, or make unauthorised purchases, and no instance of compromise of credit cards stored in Gyft accounts has been discovered yet.

The company has notified users of the inicident and has already launched a probe on how the data was accessed and what risks could it pose to the company’s customers.

GlobalData Strategic Intelligence

US Tariffs are shifting - will you react or anticipate?

Don’t let policy changes catch you off guard. Stay proactive with real-time data and expert analysis.

By GlobalData