Two apparently unsecured Azure Blob Storage containers holding a combined 1.6 million files have been discovered by CyberNews researchers, allegedly belonging to online shopping platforms Etsy, Poshmark, and TikTok Shop.
The researchers say these files contained personally identifiable information, such as full names, home addresses, email addresses, and shipping order details.
Anyone who uses these services should keep a close eye on their accounts and take a look at the best identity theft monitoring tools if they are concerned.
Save up to 68% on identity theft protection for TechRadar readers!
TechRadar editors praise Aura's upfront pricing and simplicity. Aura also includes a password manager, VPN, and antivirus to make its security solution an even more compelling deal.
Preferred partner (What does this mean?)View Deal
Customers at riskBoth of the exposed instances “contained shipping email confirmations in HTML format,” researchers confirmed, and the vast majority of users exposed are in the United States, with some from Canada and Australia.
The exact origin or ownership of the datasets is not yet known, but the nature of the information suggests that these belonged to one particular storefront (across multiple shopping platforms), in particular a Vietnamese-based embroidery service.
It’s also not known whether cybercriminals have accessed these datasets, but only an internal forensic audit would reveal this information.
Researchers outlined the risk this brings to those exposed, such as convincing social engineering attacks from cybercriminals posing as Etsy or TikTok shop - urging customers to give their details, resulting in potential financial loss.
“With access to personal information like full names and addresses, attackers could impersonate trusted shipping providers or Etsy itself, making fraudulent communications seem more credible and urging victims to take actions such as confirming personal details, making payment, or clicking malicious links,” the researchers said.
Data leaks are unfortunately all too common for internet users today.
We recommend regularly checking whether your details have been exposed, using services like Have I Been Pwned - and monitoring your accounts, statements, and transactions - and immediately reporting any suspicious or unexpected activity with your bank or credit card provider.
You might also likeElectronic Arts has canceled Cliffhanger Games' Black Panther game and closed down the studio.
In an email sent to staff (as seen and reported by IGN), EA Entertainment president Laura Miele shared the announcement and said the decision to cancel the game and close the studio was to "sharpen our focus and put our creative energy behind the most significant growth opportunities."
The number of employees affected by the decision hasn't been confirmed at this time, but IGN understands that the total number of layoffs is less than the 300 roles that were cut last month across Respawn and several other studios.
It's also understood that EA has laid off some individuals from its mobile and central teams.
"These decisions are hard," Miele wrote in the email. "They affect people we’ve worked with, learned from, and shared real moments with. We’re doing everything we can to support them - including finding opportunities within EA, where we’ve had success helping people land in new roles."
Miele's email also mentioned that EA will now focus on a small handful of franchises going forward, like Battlefield, The Sims, Skate, and Apex Legends.
The president also said that EA will continue to invest in Motive's Iron Man game and Respawn's third Star Wars: Jedi game, the Mass Effect 5, while also maintaining its mobile business
Cliffhanger's Black Panther project was announced in 2023 and was being worked on by developers who previously led the Shadow of Mordor series.
Platforms weren't confirmed at the time, and there was no trailer to accompany the game's reveal, but we did know that it was an "original, third-person, single-player Black Panther game".
At the time, project lead Kevin Stephens said the game was going to be a "definitive and authentic Black Panther experience".
"Wakanda is a rich superhero sandbox, and our mission is to develop an epic world for players who love Black Panther and want to explore the world of Wakanda as much as we do," Stephens said.
You might also like...Data analytics and risk management firm LexisNexis has disclosed a cyberattack that resulted in data theft affecting 364,333 individuals.
In a notification letter sent to those affected, the company claims an “unauthorized party” gained access to a third-party software development platform and stole the data.
According to the firm, no sensitive personal information was accessed, nor was financial or credit card information, and the organisation’s infrastructure, systems, and products also remain uncompromised.
Save up to 68% on identity theft protection for TechRadar readers!
TechRadar editors praise Aura's upfront pricing and simplicity. Aura also includes a password manager, VPN, and antivirus to make its security solution an even more compelling deal.
Preferred partner (What does this mean?)View Deal
Information affected“Our Information Security team, in consultation with a forensic firm, immediately began investigating and confirmed that some data which was held in GitHub... was acquired by an unknown third party. Specifically, we have determined that some software artifacts as well as some personal information was accessed” LexisNexis told The Register.
The leaked information includes names, phone numbers, email addresses, home addresses, SSNs, and driver’s license details - enough to spark concern for anyone affected. Take a look at the best identity theft monitoring services if you are concerned.
Not everyone is impressed with LexisNexus’ response timeline, though. Dr Ilia Kolochenko, CEO at ImmuniWeb explains;
“The timeline of the incident detection and disclosure is a bit surprising for a company offering legal and other comparatively sensitive services: the incident reportedly happened in December 2024, was detected in April 2025 after receiving information from the attackers, while disclosed only in May. Given that a lot of personal data was reportedly compromised, the incident detection and response timeline is pretty far from being perfect, to put it mildly.”
“The legal consequences of this incident may cost a lot of dollars to the breach company – being composed of regulatory penalties, legal fees and a likely settlement agreement with the victims. Sadly, as practice demonstrates, the victims will likely get paltry two- or three-digit compensation for the incident in the best-case scenario.”
LexisNexis is far from the first company to be affected by a breach like this, with firms like Co-op and Marks and Spencers offering apologies for the effects of cyberattacks that hit the retailers in May 2025.
You might also likeYes, it's been rumored before, but it sounds as though we could be seeing a very different style of fitness tracker from Garmin in a couple of months.
Garmin has consistently been known for its smartwatches – it's why we have a dedicated best Garmin watches list, after all – but the company is reportedly set to debut a Whoop-style screenless tracker "within two months", according to leak site The5kRunner.
Having apparently seen a confidential source document, The5KRunner refers to it as a "sleep band" stated to provide comfort during use. This is a nice option to have, as Garmin's chunky watches often aren't ideal for use during sleep. A buckle mechanism and overlapping adjustable strap makes it sound similar to Whoop.
The comparisons don't stop there. Features listed include vibration alarm that wakes the wearer, tap gestures to turn off or snooze the alarm, and an LED battery indicator – all emblematic of Whoop.
Sleep tracking is a given, considering the device is said to pack a smart-wake alarm. Smart-wake alarms, a feature recently introduced in the Garmin Vivoactive 6, only work if the wearable is actively tracking sleep stages via heart rate and other metrics.
Whoop's got some competitionA long time ago, based on my colleague Lance Ulanoff's findings during CES 2023, I predicted that screenless smartwatches would be the future of fitness.
While that hasn't strictly proven true until now, 2025 has seen new screenless optical heart rate monitoring fitness tech from Whoop, Coros, and now (apparently) Garmin, not to mention the advent of the best smart rings.
Fitness tracking is going discreet, focusing on the holistic overall benefits of an active lifestyle rather than specifically tracking workouts.
While the best running watches will always have a place, I think an optical armband-based Whoop competitor from a company like Garmin, with an enormous built-in infrastructure for sleep, health and workout tracking, could be a real winner.
You might also like...The upcoming Echolens is a digital camera that stands out from the pack. Designed to recreate the experience of shooting on analog film, it has no rear screen and built-in film-style filters to create warm, vintage photographs. And the X100VI look-a-like is also going to be really, really affordable.
We’ve seen cameras like the Echolens before. We don’t mean compact, fixed-lens and pricey cameras like the imperious Fujifilm X100VI, the stunning Leica Q3 43 or even the recent fun-oriented Fujifilm X, although there’s definitely a bit of all three in the Echolens’ eye-catching retro styling. We mean in pared-back, cheap point-and-shoots like the Camp Snap, which also has no screen and a refreshingly simple approach to shooting.
While details on its lens, sensor and other specs are yet to be revealed, the Echolens appears to be a little more advanced than the Camp Snap. For one thing, it has an LCD indicator on its top plate to keep count of your shots.
After 54 snaps have been captured, you’ll have to offload them to your smartphone or the cloud via the camera’s built-in Wi-Fi – a feature that’s supposed to 'echo' the act of changing the roll of film in your analog camera. This offloading apparently takes just one button press and no time at all.
The bottom plate features a shot count indicator and image transfer button. (Image credit: Echolens)Stripped-back shootingThe Echolens website promises a minimalist approach to photography, stripping away much of the tinkering that can get in between the photographer and their subject.
That means simplified controls (there’s a shutter button, an image transfer button and a dial to switch the flash on and off, and that seems to be it), a viewfinder for composition and nothing in the way of AI image enhancement or over-sharpening. Instead, the user can pick from a range of digital ‘film’ styles designed to replicate the color profiles of classic 35mm stocks.
A USB-C port is also present for recharging, and Echolens’ makers claim the battery will last for several days on a full charge.
The Echolens' top plate has a shutter button and a flash control – nothing else. (Image credit: Echolens)While we really need more detail before we can get too excited about this camera – and all the usual crowdfunding caveats still apply – we hopefully won’t have to wait long. Echolens is slated for a launch on Kickstarter in mid-June 2025, with a full release to follow at an unspecified later date.
What we do know, roughly at least, is the price: the Echolens site’s FAQ says the camera will be around $150 (or around £110 / AU$230), but early bird backers on Kickstarter will be able to secure a pre-order for under $100 (about £75 / AU$155). Which seems like a brilliantly affordable price tag if this thing lives up to its billing.
Of course, backers sometimes have a lengthy wait for the finished product after a Kickstarter campaign closes, so we’ve reached out to Echolens to try and find out more about their camera and campaign. We’ll update this story when we have further info.
The flash dial simply toggles between on and off, apparently. (Image credit: Echolens)You might also likeThose who haven’t yet installed the latest cumulative update for Windows 11 in May – by which I mean the upgrade released the week before last, not the most recent optional update – should be aware of a nasty bug that some users are encountering.
Microsoft has said that it’s investigating whether the May update can cause a showstopping error, which means your PC won’t boot. However, this warning is delivered with a welcome caveat that it isn’t likely to affect Windows 11 Home users. Still, that possibility isn’t ruled out, and given the gravity of the bug, it’s worth bearing in mind if you’re about to pull the trigger on this cumulative update.
Bleeping Computer reports that Microsoft has updated its release health dashboard with information on the bug, and how the upgrade might fall over with a ‘recovery error 0xc0000098 in ACPI.sys’ message.
This is no simple error or installation failure, though, because it leaves Windows 11 unable to boot and requires a repair to be run on the system. And whether that repair will be successful is anyone’s guess, as sometimes, these are the kind of situations that are tricky to recover from – and the OS won’t necessarily pull itself out of the hole that’s been dug.
The good news is that affected devices running Windows 11 22H2 and 23H2 – note that 24H2 is not affected here – are few in number. Primarily, this problem pertains to virtual machines, not physical Windows 11 PCs.
Microsoft explains: “Home users of Windows using Home or Pro editions are unlikely to face this issue, as virtual machines are mostly used in IT environments.”
However, being ‘unlikely’ does not equate to being impossible, and so there must have been some reports of Windows 11 PCs (as opposed to virtual machines) being affected by this unfortunate issue.
I did find one such recent report on Reddit, although it isn’t explicitly linked to the latest update being installed, so take that with a grain of salt. The error message was slightly different as well, but in its warning, Microsoft acknowledges that a file name other than ACPI.sys might appear in the error.
Analysis: A cautious approach may be wise here(Image credit: MAYA LAB / Shutterstock)Microsoft wouldn’t announce such an investigation lightly, so if you haven’t yet installed the May update, I think that it’s worth considering delaying the installation of that upgrade for a little longer. Mainly to allow for Microsoft to complete its investigation here, after all, you’ve waited a couple of weeks (for whatever reason) now, so what’s another week, or perhaps a bit longer?
It is possible to pause OS updates for over a month, even on Windows 11 Home, though you’ll be forced to apply any given patch after 35 days of deferring it.
In this additional time, you can wait for Microsoft to complete its deeper dive into what’s going on here, and hopefully that’ll lead to a fix being implemented soon, too.
Granted, you’d probably be very unlucky to encounter this recovery error, but even a small chance is off-putting, given that it could be a potentially thorny problem to extricate yourself from. Ultimately, the choice is yours, and if you’ve already installed the May update without encountering any such error, I should make it clear that you've got nothing to worry about.
Microsoft isn’t having a great time of things lately when it comes to bugs of a seriously unpleasant nature, as there was a real sting in the tail for some Windows 10 users with the May update, too.
You might also like...