Amorelie reports security vulnerability

Customer data from the years 2013 to 2020 are affected. So far, there are no indications of data misuse, the company writes.

The online sex shop Amorelie has announced a security vulnerability in its system. Affected were order data of customers and registered users between 2013 and May 2020, including names, addresses, email addresses, purchased products and payment method. However, bank and credit card details had not been retrievable.

"While unlawful access to the data cannot be completely ruled out at this time, there is currently no evidence of any possible improper access," Amorelie wrote on its website. Users should inform the company of any unusual occurrences that could indicate misuse of the data.

According to its own information, Amorelie learned about the security vulnerability at the end of November. A few minutes later, the company closed it and reported the incident to the responsible data protection authority.