Lidl Data Breach Exposes Customer Information from IT Service Provider

Lidl has confirmed a data breach involving unauthorized access to customer data from an external IT service provider. The breach allowed attackers to steal personal information, including names, email addresses, phone numbers, and birth dates. Lidl has notified affected customers and the relevant data protection authority, but has not disclosed the number of individuals impacted. The company clarified that payment information and passwords were not compromised, and the central database of the online shop system remained secure. The service provider has taken measures to secure its IT systems and has filed a criminal complaint regarding the incident. Customers are advised to remain vigilant against potential phishing attacks. No evidence of data misuse has been reported so far.

Key Points: • Lidl's data breach involved customer information stolen from an external IT service provider. • Personal data accessed includes names, emails, phone numbers, and birth dates, but not payment info. • Affected customers have been notified, and the incident has been reported to the data protection authority.