Gyft, Inc.

Gyft, Inc. reported that an unknown party accessed without authorization two cloud providers used by Gyft from October 3 through December 18, 2015. The attacker could view or download user information including names, addresses, dates of birth, phone numbers, email addresses, gift card numbers, and potentially login credentials for users active between March 19 and December 4, 2015. No credit card numbers were compromised. Gyft forced password resets and reset Coinbase tokens for affected users.