Novanews.Co.Za Pick n Pay Faces Data Breach from Old Delivery Platform
Article Content
- •Data breach linked to Pick n Pay's old delivery platform, Bottles.
- •Compromised data includes names, emails, and encrypted passwords, but no full card details.
- •Pick n Pay is conducting a forensic investigation and has notified potentially affected customers.
Pick n Pay has reported a data breach involving personal information from its former delivery platform, Bottles, and its later version, Pick n Pay asap!. The breach, affecting records dating back to 2022, was only recently discovered online. Customers who registered on the older app may be impacted, with compromised data potentially including names, email addresses, mobile numbers, and encrypted passwords. However, the retailer confirmed that full credit card numbers and CVV codes were not stored and thus cannot be used for fraudulent transactions. Pick n Pay has initiated a forensic investigation and is contacting all affected customers. The company is also enhancing its data management practices and security protocols. Customers are advised to remain vigilant against phishing attempts using their personal information.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Pick N Pay in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Vulnerability in Cisco Secure Email Gateway Exploited On September 14, 2026, Cisco disclosed a critical SQL injection vulnerability (CVE-2026-76461) in its Secure Email Gateway, allowing unauthenticated remote attackers to execute arbitrary commands with root privileges. This vulnerability arises from insufficient validation in the email parsing logic. Cisco confirmed…
Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API…