NewAI pentesting that proves every finding
INSECUREWEB

Data Breach News2 min read

263K Customer Records Leaked from SATURDAYS Eyewear

By InsecureWeb Team

This report reflects observations of dark web activity. InsecureWeb makes no representations regarding the accuracy of this data.

263K Customer Records Leaked from SATURDAYS Eyewear

Breach Overview
SATURDAYS, an Indonesia-based eyewear brand with 69 stores worldwide and $13.8M annual revenue, leaked a customer database containing 283,004 entries. The breach occurred in early June 2025 after failed notification attempts. The data was publicly posted by the uploader for download.

Compromised Data Fields

  • Personal Info: Mobile number, first and last names, email
  • Demographics: Date of birth, gender, country code
  • Account Details: User tier, verification status
  • Where & How?
    The data was extracted from SATURDAYS’ cloud-based customer system and uploaded to dark web/Telegram platforms in early June 2025. Despite notification efforts to the brand, the leak was exposed publicly by the uploader.

Company Breach History
Research shows no previous public reports of SATURDAYS experiencing data leaks or security incidents, suggesting this may be their first known breach. This highlights potential weaknesses in their data protection and incident response procedures.

News & References on Eyewear-Industry Breaches:

  • Luxottica (Italy): In May 2023, confirmed a 2021 breach involving 70M+ customer records including names, emails, addresses, and phone numbers—linked to a third-party vendor.
  • Major eyewear retailer (vendor-linked): Reported in June 2023—over 70 million records compromised in Nov 2022, including names, emails, physical addresses, phone numbers .

Actionable Advice
To SATURDAYS (and similar brands):

  • Conduct a comprehensive forensic audit to identify breach vectors.
  • Enhance security protocols: multi-factor authentication, data encryption, intrusion detection.
  • Improve communication channels and response time with affected users.

To Users:

  • Change passwords and enable two-factor authentication.
  • Be wary of phishing attempts.
  • Monitor your accounts and personal information for suspicious activity.

What is InsecureWeb?

InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.

Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.

More breach reports