Lidl Discloses Third-Party Data Breach Impacting Online Shoppers in Germany, Belgium, and the Netherlands Lidl has notified customers of its online shops in Germany, Belgium, and the Netherlands about a data breach stemming from a cyberattack on an external IT service provider. The incident, discovered earlier this month, exposed personal data including names, phone numbers, email addresses, dates of birth, and customer numbers but did not compromise payment information, passwords, or billing details. The breach occurred when unidentified attackers briefly accessed a segregated file containing customer data, despite the service provider’s security measures. Lidl confirmed that its online shop systems remained unaffected. In the Netherlands, the company reported the incident to the Autoriteit Persoonsgegevens (Dutch Data Protection Authority), while the compromised provider filed a police report and engaged forensic experts to assess the full impact. While Lidl stated there is no current evidence of data misuse, the exposed information such as names, emails, and dates of birth could be exploited for phishing or impersonation scams. The company issued separate notifications in Belgium and the Netherlands, reiterating that customer accounts were not directly breached. The incident highlights the risks of third-party vulnerabilities in supply chain security.

Lidl Netherlands Reports Customer Data Breach Affecting Webshop Users Lidl Netherlands has disclosed a data breach impacting customers who used its webshop, revealing that unauthorized individuals accessed personal information. The stolen data includes names, telephone numbers, email addresses, dates of birth, and customer numbers. However, the supermarket chain confirmed that passwords, billing addresses, delivery details, and payment information including bank details remained secure. The company has notified affected customers via email and reported the incident to the Dutch Data Protection Authority (AP). While Lidl has not disclosed the number of impacted individuals, it stated there is no evidence of the stolen data being misused. The breach highlights ongoing cybersecurity risks for retailers, particularly in e-commerce platforms where customer data is stored. Lidl’s response follows standard protocol, including regulatory reporting and direct communication with those affected. Further details on the breach’s scope or the attackers’ methods have not been released.