Data from collectibles marketplace and community platform Collectibles.com was leaked this week for as many as 900,000 customers, according to cybernews.com.
The breach included full names and transaction records, per the report.
The site warned attackers could use the information for phishing campaigns.
Collectibles.com released a statement Thursday morning, around 24 hours after the leak.
“We recently became aware of an issue where an unsecured network database used by our system temporarily allowed unauthorized access to information, including user names, email addresses, and collections data — most of which is already publicly available as defined by user preference to showcase their items.”
The company said it had no evidence of how many accounts were affected.
Will Stern is a reporter and editor for cllct.