Flink Hit by Major Data Breach: Cybercriminals Extort Customers and Employees Cybercriminals operating under the name LPG Group claimed to have stolen personal data from Flink, the rapid grocery delivery service, affecting 1 million customers and 13,000 employees. The breach, disclosed on Friday, exposed names, postal codes, email addresses, phone numbers, and delivery instructions but not passwords, billing details, or payment card information. Flink, headquartered in Germany with operations in the Netherlands, confirmed the incident and reported it to German and Dutch authorities, including the German Data Protection Authority. The company stated that unauthorized access to an internal system was immediately blocked, and an investigation is underway with external cybersecurity experts. The hackers demanded €11.80 in Ethereum (0.005 ETH) from individual victims in exchange for deleting their data, while also threatening to leak all stolen data unless Flink paid 100 ETH (nearly €237,300) by October 2. Flink has not confirmed whether it received a separate extortion demand but warned customers and employees not to engage with the attackers. The LPG Group remains largely unknown, though cybersecurity experts note similarities to Conti ransomware, a tool linked to the Russian-backed Wizard Spider hacking collective. The group’s tactic of directly extorting individual victims rather than just the company is unusual, according to Pim Takkenberg of Northwave, who called it an "exceptional" approach. Flink, which gained popularity during the COVID-19 pandemic, serves dozens of Dutch municipalities, including 24 of the 25 largest in the country. The breach highlights a growing trend of cybercriminals targeting consumers when companies refuse to pay ransom demands.