PandaBuy pays ransom to hacker only to get extorted again

PandaBuy reportedly suffered a major data breach in which a threat actor named 'Sanggiero' published 3 million rows of customer data and later offered a purported 17 million-row database for sale and extortion; PandaBuy admitted to previously paying the attacker to stop a leak but now faces renewed extortion and possible resale of stolen customer and employee credentials, with at least 1.35 million emails added to Have I Been Pwned.