IKEA Hit by Alleged Data Breach: Hackers Claim Theft of 180GB of Internal Data The hacker group Lapsus$ has claimed responsibility for a major data breach targeting IKEA, alleging the theft of 180 gigabytes of sensitive internal data. According to researchers at Cybernews, the hackers published a sample file referencing approximately 6,300 internal folders, including content management systems, business applications, data analysis tools, and IKEA’s Android app. However, the full contents of these folders remain unverified, as the hackers did not release the complete dataset. The stolen data reportedly includes source code, technical architecture documents, and other confidential information, raising concerns about potential exposure of proprietary systems. While IKEA has not publicly confirmed the breach, the claims align with Lapsus$’s history of targeting high-profile organizations. The incident underscores growing cybersecurity risks for global retailers, particularly as attackers increasingly focus on supply chain and internal infrastructure vulnerabilities. No further details on the breach’s impact or IKEA’s response have been disclosed at this time.

Vice Society targeted the IKEA stores in Morocco and Kuwait and posted data taken from them on their leak site. They managed to steal confidential business data and even sensitive employee information.

Ikea Canada suffered a data breach incident that compromised the personal information of approximately 95,000 customers. The compromised information included customer names, email addresses, phone numbers, and postal codes, however, no financial or banking information was exposed. They reviewed and updated internal processes to prevent such incidents in the future.

IKEA fell prey to a cyber attack in internal phishing attacks using stolen reply-chain emails. IKEA organizations, suppliers, and business partners were compromised by the attack and it was still spreading to other systems as well. IT team warned the employees to not open any mail containing suspicious links and report it to them immediately if received