Lidl disclosed a data breach affecting customers in Germany, Belgium, and the Netherlands due to a hack on a service provider. The breach allowed attackers to access customer information from Lidl's online shop, although the company's systems were not directly compromised.
Lidl confirmed that a breach occurred at a third-party service provider, resulting in unauthorized access to a separate file of customer data from its online shop. The supermarket chain communicated the incident to impacted customers through email notifications and published alerts on its support sites in Belgium and the Netherlands.
The stolen data includes personal information such as salutation, first and last name, telephone number, email address, date of birth, and customer number. While the online shop's system remained intact, Lidl noted that it could not confirm whether other sensitive information, like passwords or banking details, was also compromised.
Lidl has reported the incident to the Dutch Data Protection Authority and the affected service provider has engaged law enforcement and IT forensic experts to evaluate the breach's impact. Customers are advised to remain vigilant against potential phishing attempts utilizing the stolen data.
As a precaution, Lidl has urged customers to be alert for unexpected messages, verify sender authenticity, and refrain from providing any information or clicking on unknown links. Although no concrete evidence of data misuse has emerged, the warning aims to mitigate potential risks of identity fraud.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
Lidl disclosed a data breach affecting customers in Germany, Belgium, and the Netherlands due to a hack on a service provider. The breach allowed attackers to access customer information from Lidl's online shop, although the company's systems were not directly compromised.