winfashion

══════════════════════════ ══════════════════════════ ══════════════════════════ WINFASHION TECHNOLOGIES DUMP: DATA LEAK ANALYSIS OF A B2B ERP PLATFORM FOR THE FASHION INDUSTRY ══════════════════════════ ══════════════════════════ ══════════════════════════ This is a preliminary analysis, processing of sensitive data is currently underway. Target: WinFashion Technologies (Los Angeles, USA) — an international B2B provider of ERP solutions (WF125sR / Fabric ERP V.10) for 250+ fashion brands. Offices in New York, Shanghai, and India. Integrations: Shopify, Acenda, JOOR, NuORDER, CommerceHub, FashionGo. BPO/EDI processing via Inovis/QRS. DUMP VOLUME: ~205K files / ~13K directories / ~73 Gigabytes AT-RISK FILES: 125,274 (61.0%) Critical: 9,350 High: 78,174 Medium: 37,750 PRELIMINARY FINDINGS: ▸ kaktus.bak (5.64 GB) — full MSSQL backup of the "Kaktus" client's ERP installation (Customer Master, Style Master, EDI, AR) ▸ 6 SSL PFX containers + EDI-VAN client certificate for ECGrid/OpenText ▸ 33,307 .shxml files — WinSCP SFTP session logs (hosts, paths, sizes) ▸ 332 ASP.NET Web.config files — potentially hardcoded Shopify / Authorize.Net secrets ▸ 171 files with PAN / CreditCard / Cardholder / Payment data — Authorize.Net payment processing code ▸ 39 files with IBAN / SWIFT / BankAccount data — bank account details ▸ 259 Invoice Register / Invoice data files — Excel payment registers (up to 124 MB) CLIENT DATA (~40 BRANDS): ▸ STYLEMASTER.xlsx (48 MB) — aggregated product catalog export ▸ Vendors.XLS (20 MB) + test customers.XLS (7 MB) — Kaktus vendors and customers ▸ 40,621 EDI files (.edi / .850 / .856 / .810 / .997 / .852 / .832 / .846) — full B2B trade lifecycle (PO, ASN, invoices, price catalogs) INTELLECTUAL PROPERTY: ▸ 8,577 .cs files — integration source code (Authorize.Net, Shopify, Acenda, JOOR, NuORDER, DSCO) ▸ 5,828 .pbd files — PowerBuilder WF125sR ERP core ▸ 3,398 .sql files — DB schema, triggers, CLR procedures ▸ 18 .dbf / .mdf files — legacy DBASE /...