Spread Group

Spread Group, also known as Spreadshirt, operates as a print-on-demand apparel company headquartered in Germany. Its core business involves enabling customers to design, customize, and sell personalized t-shirts and other merchandise items. The company provides platforms where individuals can create unique designs for printing on various products and also facilitates the sale of these custom items to consumers. This model serves a market of creators and buyers interested in personalized clothing and accessories. Spread Group manages the printing, fulfillment, and distribution processes for these customized orders.

In July 2021, Spread Group experienced a significant cybersecurity incident characterized by considerable criminal intent. Unauthorized actors gained access to company servers, compromising sensitive data belonging to customers, partners, and employees. The breach exposed personal information including postal addresses and financial details such as bank and PayPal information. Older password hashes were also among the compromised data. Following the discovery of the attack, Spread Group notified affected parties about the breach. The company advised impacted individuals to change their passwords and emphasized the importance of using unique credentials while avoiding the inclusion of personal information within passwords as part of secure online practices. This incident highlighted vulnerabilities within the organization's infrastructure at that time.