Offerz reports unauthorized access to data copy affecting 115,000 customers

Summary

Unknown attackers accessed an Offerz test environment containing a copy of order data for about 115,000 customers. Offerz could not confirm whether data was taken; it disabled the environment, reset passwords, and notified authorities.

Key points

• Unknown parties accessed an Offerz test environment on October 7, 2026; the access was discovered on October 9.
• The environment could access a cloud-stored copy of shop order data from January 2026, which should have been deleted after technical work.
• The copy contained names, home and email addresses, phone numbers, IP addresses, and payment-method information. Offerz said passwords and payment data were not included.
• Offerz could not establish whether data was actually exfiltrated and said it was treating the data as potentially exposed.
• Offerz disabled the test environment, blocked access, checked other systems, and required customers to reset passwords.
• The company warned of possible fraud attempts, filed a criminal complaint, and notified Swiss data-protection and cybersecurity authorities.