“We are writing to let you know that there may have been illegal and unauthorized access to some of your customer account information on Zappos.com, including one or more of the following: your name, e-mail address, billing and shipping addresses, phone number, the last four digits of your credit card number (the standard information you find on receipts), and/or your cryptographically scrambled password (but not your actual password),” Zappos wrote in a note to users of zappos.com and 6pm.com.
The company went on to spin positively that “The database that stores your critical credit card and other payment data was NOT affected or accessed,”
As usual in such scenarios, Zappos and 6PM.com have reset the users’ passwords as a security measures, urging them to set a new password immediately both on these sites and on any other web site where they use the same or a similar password.
Currently Zappos.com is not accepting international traffic, and 6PM.com has temporarily turned off their customer service phones, directing users to send inquiries via e-mail.