Lidl Says Service Provider Breach Stole Online-Shop Customer Data
Summary
Lidl says attackers accessed a file at a service provider and stole some online-shop customers’ personal data in Germany, Belgium and the Netherlands. The shop’s systems were not affected; possible exposure of passwords or payment details remains unconfirmed.
Key points
- Lidl reported that unknown individuals briefly accessed a separately stored customer-data file at a service provider and stole some information.
- Affected customers are in Germany, Belgium and the Netherlands; Lidl said its online shop’s systems were not affected.
- The stolen data includes names, phone numbers, email addresses, birth dates and customer numbers.
- Lidl said it cannot yet rule out exposure of passwords, addresses, bank details or other payment information.
- The service provider filed a police report and engaged forensic experts; Lidl notified the Dutch Data Protection Authority.
- Lidl warned customers to watch for phishing and identity fraud, while saying it had no concrete evidence of misuse.
Article Details
- Victim Organization
- Lidl
- Victim Domain
- Unknown
- Incident Type
- Customer data theft in a breach at a third-party service provider
- Data Types Exposed
- Confirmed: salutation, first and last name, telephone number, email address, date of birth, and customer number
- Possible but not confirmed: passwords, billing and delivery addresses, bank details, or other payment information
- Affected Records
- Not disclosed
- Affected Data Size
- Not disclosed
- Operational Impact
- Customer data from Lidl’s online shop was stolen from a separately stored file at a service provider. Lidl said its online shop systems were not affected.
- Ransom Or Extortion
- Unknown
- Claim Status
- confirmed
Countries
BelgiumLidl notified customers in Germany, Belgium, and the Netherlands that personal information was stolen in a breach at one of its service providers.GermanyLidl notified customers in Germany, Belgium, and the Netherlands that personal information was stolen in a breach at one of its service providers.NetherlandsLidl notified customers in Germany, Belgium, and the Netherlands that personal information was stolen in a breach at one of its service providers.