"We are writing to let you know that there may have been illegal and unauthorized access to some of your customer account information on Zappos.com, including one or more of the following: your name, e-mail address, billing and shipping addresses, phone number, the last four digits of your credit card number (the standard information you find on receipts), and/or your cryptographically scrambled password (but not your actual password)," wrote Zappos and 6PM.com in a note to users.
While the breach is definitely bad news for Zappos and 6PM.com customers, luckily not all user data was compromised. "The database that stores your critical credit card and other payment data was NOT affected or accessed," said the note.
As usual in such scenarios, Zappos and 6PM.com have reset the users' passwords as a security measures, urging them to set a new password immediately both on these sites and on any other web site where they use the same or a similar password.