{"id":96379,"date":"2019-08-08T09:11:19","date_gmt":"2019-08-08T16:11:19","guid":{"rendered":"https:\/\/securingtomorrow.mcafee.com\/?p=96379"},"modified":"2025-08-29T02:03:39","modified_gmt":"2025-08-29T09:03:39","slug":"cafepress-breach","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/internet-security\/cafepress-breach\/","title":{"rendered":"23M CafePress Accounts Compromised: Here\u2019s How You Can Stay Secure"},"content":{"rendered":"

You\u2019ve probably heard of CafePress, a custom T-shirt and merchandise company allowing users to create their own unique apparel and gifts. With a plethora of users looking to make their own creative swag, it\u2019s no surprise that the company was recently targeted in a cybercriminal ploy. According to Forbes<\/a>, CafePress experienced a data breach back in February that exposed over 23 million records including unique email addresses, names, physical addresses, phone numbers, and passwords.<\/p>\n

How did the breach happen?<\/h2>\n

How exactly did this breach occur? While this information is still a bit unclear, security researcher Jim Scott stated that approximately half of the breached passwords had been exposed through gaps in an encryption method called base64 SHA1. As a result, the breach database service HaveIBeenPwned<\/a> sent out an email notification to those affected letting them know that their information had been compromised. According to Engadget<\/a>, about 77% of the email addresses in the breach have shown up in previous breach alerts on HaveIBeenPwned.<\/p>\n

\"\"<\/p>\n

Scott stated that those who used CafePress through third-party applications like Facebook or Amazon did not have their passwords compromised. And even though third-party platform users are safe from this breach, this isn\u2019t always the case. With data breaches becoming more common, it\u2019s important for users to protect their information as best as they can. Check out the following tips to help users defend their data:<\/p>\n