InfoSecBulletin Cybersecurity for mankind
Evaly, a Bangladeshi e-commerce platform, is reportedly facing a major data breach that may have exposed sensitive information of around 783,611 customers and merchants. This incident is said to have occurred today, May 23, 2025.
Evaly’s website currently displays a message stating, “HACKED, I HAVE ALL CUSTOMER DATA. EVALY STAFF PLEASE CONTACT OR ELSE I WILL RELEASE THIS DATA TO THE PUBLIC.”
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
Update now! PHP2Shell: Critical PHP vulnerabilities patched
Trump says data centres should pay dividends to local community
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools
CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines
Claude AI Cracks 25-Year NSA Cryptography Number Mystery in Just 30 Minutes
Posts on the clear and dark web claim that compromised data includes names, email addresses, phone numbers, and order details. The alleged thief is selling this stolen information for $500, with samples showing customer orders, shipping addresses, and contact details.
Evaly customers should be alert for suspicious activities like phishing or unauthorized use of their personal information.
Infosecbulletin didn’t receive any replay while publishing the report from the Evaly authority.
