The German supermarket chain Lidl reports that it has been hit by a cyberattack, in which data from Belgian and Dutch customers was also leaked.
Hackers have filled their shopping carts with Lidl customer data. The German supermarket chain, which also has many branches in Belgium and the Netherlands, announced this yesterday. Separate statements on the Belgian and Dutch websites suggest that customers here have also been affected.
The attack did not take place directly on Lidl’s systems, but at an unnamed IT service provider. The hackers reportedly gained access to a separate server containing customer data. This included names, phone numbers, email addresses, and customer numbers. It remains unclear who is behind the attack.
Online shop system not affected
Lidl says it can state with certainty that its online shop system was not the target, or at least that the attackers did not manage to get in. As a result, customers do not need to fear that passwords, billing and delivery addresses, bank details, or other payment information have been exposed. The relevant authorities have been informed, and forensic experts have been brought on board to investigate what went wrong.
However, cybercriminals only need your email address to cause further damage. Phishing remains the most popular attack vector to this day, and with the help of AI tools, criminals can create increasingly convincing emails. For example, they can deceive you with fake promotions in Lidl’s name or other cunning tricks to get you to log into your account and enter your bank details. So, be extra vigilant in the coming period for emails you receive in Lidl’s name and think twice before clicking on a link or attachment.