Seiko USA Website Defaced in Extortion Attack, Customer Data Allegedly Stolen Over the weekend, the Seiko USA website was defaced by attackers who claimed to have breached the company’s Shopify customer database and demanded a ransom to prevent its public release. The "Press Lounge" section of the site was replaced with a defacement page titled "HACKED," which included a ransom note and a warning of a data breach. The attackers asserted they had accessed Seiko USA’s Shopify backend and exfiltrated sensitive customer information, including: - Customer details (names, email addresses, phone numbers) - Order history (purchase records, transaction details) - Shipping data (addresses, shipping preferences) - Account information (creation dates, customer notes) To prove their access, the threat actors instructed Seiko USA to locate a specific customer account (ID 8069776801871) in the Shopify admin panel, where they claimed to have added a contact email for negotiations. The attackers set a 72-hour deadline before allegedly publishing the stolen data. As of now, the legitimacy of the breach remains unconfirmed. Seiko USA has not publicly responded to inquiries from BleepingComputer but has since removed the extortion message from its website. The identity of the threat actors and the validity of their claims are still unclear.