Raffaello Network Alleged Data Exposure
The 2022 Raffaello Network data breach occurred in November 2022 when backend customer membership databases from Raffaello Network (raffaello-network.com), an Italian luxury designer fashion and outlet retailer, were leaked on BreachForums by selukas.
Exposed Data Types
5- Email addresses
- Passwords
- Names
- Phone numbers
- Physical addresses
About This Record
What information was exposed in the Raffaello Network incident?
The leaked SQL database export encompasses the primary members customer table. Compromised data classes include:
- Customer Identity: Billing and shipping recipient full names and account usernames.
- Contact Coordinates: Billing and shipping email addresses (bill_email, ship_email) and contact phone numbers.
- Physical Addresses: Street delivery addresses, cities, provinces, postal codes, and countries worldwide.
- Authentication Secrets: Passwords securely hashed with the bcrypt algorithm at work factor 12 (
$2y$12$...).
How many accounts were affected?
Strict RFC 5322 ASCII canonical verification confirmed 771,545 unique valid email addresses across 839,774 raw records.
Security risks and recommendations
While bcrypt factor 12 provides strong protection against automated hash cracking, the exposure of high-end fashion consumers' names, phone numbers, and physical residential addresses facilitates highly convincing delivery-impersonation, customs payment scams, and targeted spear-phishing. Affected customers should:
- Update account passwords on Raffaello Network and any services sharing the same credentials.
- Scrutinize unexpected package delivery notifications and unsolicited customs fee payment requests.
- Enable two-factor authentication (2FA) across personal email and financial accounts.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
