Recent reports indicate that Lidl identified a cyberattack impacting data stored by an IT service provider connected to Lidl Online Shop. The incident led to the exposure of some personal information, including full names, phone numbers, email addresses, dates of birth, and customer numbers. Importantly, passwords, billing and delivery addresses, bank details, and other payment information were not reportedly compromised, and customer accounts remained unaffected.

Lidl has advised customers to stay vigilant against phishing and identity fraud, acknowledging that stolen data could be used to craft more convincing targeted emails. While there is no concrete evidence of misuse at this time, the company emphasizes precautionary measures to reduce risk and protect customers against potential fraud.

The company described its response as prompt, stating that it immediately resumed security controls and took necessary steps to restore the affected systems. A formal report was filed with the relevant authorities, and IT forensic experts were engaged to investigate the breach. Local data protection authorities in the Netherlands, Belgium, and Germany were notified as part of the incident response. Lidl operates approximately 12,900 stores across 32 countries in Europe and the United States.

This event underscores the broader challenges that large retail organizations face when relying on third-party IT service providers. It serves as a reminder for consumers to monitor financial statements and correspondence, verify unexpected communications, and exercise heightened skepticism regarding unsolicited messages that request sensitive information.

For organizations, the incident reinforces the importance of robust third-party risk management, rapid containment, clear communication with customers, and proactive collaboration with law enforcement and forensic experts to investigate and mitigate data exposure.

from Latest from TechRadar https://ift.tt/KWFvl9u
via IFTTT IA