Ricardo Data Breach Exposes Contact Details of Nearly 890,000 Accounts
Summary
Ricardo says unauthorized access exposed names, postal addresses, and phone numbers for nearly 890,000 accounts. The company says it fixed the vulnerability, is notifying affected users, and reported the incident to Swiss authorities.
Key points
- The breach affected approximately 890,000 accounts on the Swiss platform.
- Exposed information included names, postal addresses, and phone numbers; business users’ company names were also revealed.
- Ricardo said attackers did not access email addresses or passwords.
- The company noticed unusual server activity on October 7, 2026, and says it resolved the vulnerability that enabled access.
- Ricardo is contacting affected users and has notified Switzerland’s Federal Data Protection and Information Commissioner.
- The company plans to file a police complaint and report the incident to the Swiss National Cyber Security Centre.
- The article advises affected users to watch for suspicious messages and requests for passwords or financial information.
Article Details
- Victim Organization
- Ricardo
- Incident Type
- Data breach involving unauthorized access through a security vulnerability
- Disclosure Date
- 2026-10-09
- Data Types Exposed
- Names
- Postal addresses
- Telephone numbers
- Company names of business users
- Affected Records
- Approximately 890,000 user accounts
- Operational Impact
- Ricardo detected unusual server activity on 2026-10-07, secured its systems, and stated that it had resolved the vulnerability that allowed access.
- Claim Status
- confirmed