StorEnvy

StorEnvy, also known as StoreEnvy, operates as an e‑commerce platform that enables merchants to create online storefronts and sell products to consumers. The company is headquartered in the United States of America. It provides a service where individuals and businesses can set up customized shops, list items for sale, and manage transactions through the platform. Users of the service include both sellers who maintain merchant accounts and buyers who create customer accounts. The platform facilitates the display of product listings, order processing, and communication between parties. Its core offering centers on providing the technical infrastructure needed for online retail activities.

In May 2020, StorEnvy experienced a security breach that exposed approximately 1.5 million customer and merchant accounts. The compromised data included email addresses, plain‑text passwords, full names, usernames, IP addresses, geographic locations, gender information, and links to social media profiles. Additionally, partial order details such as purchase dates and payment methods were part of the leaked dataset, while financial information and shipping addresses were not included. At the time of disclosure, the exposed credentials remained functional, indicating either a recent compromise or widespread password reuse among affected users. The leaked combination of cracked credentials and SQL database extracts heightened the risk of credential‑stuffing attacks, phishing campaigns, and identity theft across other services where users might have reused their login information. This incident highlighted the platform’s handling of sensitive user data and underscored the importance of robust security measures for e‑commerce services.