Regional furniture and appliance conglomerate, Courts, has confirmed a massive data breach affecting its old e-commerce platform, which it says has since been “cauterized”. 

While not disclosing duration or scope of the data breach, the Unicomer Group subsidiary advised that it “immediately acted” on the www.shopcourts.com vulnerabilities. 

Courts, in a statement on Sunday (November 13), further indicated that customers on the “new, more secure” www.courts.com platform were not impacted by the data breach. 

The company first unveiled shopcourts.com on December 23, 2013, across its 11 regional markets. Transactions were then migrated exclusively to courts.com in September 2023.

See statement in full: 

“We identified a data breach in our previous e-commerce platform www.shopcourts.com, and we immediately acted. 

In September 2023, we replaced our e-commerce platform with a new, more secure site www.courts.com, that enforces the measures and strengthens our security levels accordingly, to ensure we have a secure platform. 

Our e-Commerce customers can be assured that none of their payment methods and password information was exposed in this incident. Please note the leakage was cauterized and did not impact customers who shopped in our physical stores. 

At Courts, our customers come first, and we value the trust placed in us and our brand over the last 64 the years. We continue to take the relevant steps to best serve you. 

We take the security of your data very seriously, and apologise for any inconveniences this may have caused. We continue to be guided by the incoming Data Protection Act, effective December 1, 2023.” 

Checks by Our Today to the Leakbase.io data breach notification website show the matter has affected several Caribbean countries in which Courts operates. 

As proof, hackers provided a sample out of the purported 200,000 customer records, with the publicly leaked database affecting customers in Barbados, Belize, Jamaica, St Lucia and Trinidad and Tobago. 

Additionally, the breach, pinged just before noon on August 29, includes personal information data such as customers’ names and other identification details, addresses, payment methods, purchase locations, purchase dates and grand totals quoted in US dollars.