Share this article on:
Woolworths is contacting an estimated 2.2 million impacted customers via email after “some customer data” had been exposed due to “a compromised user CRM credential” linked to MyDeal, a Woolies-owned, online retail marketplace.
Woolworths has disclosed the data of 2.2 million customers of My Deal, an online marketplace it owns, has been exposed due to a cyber attack.
The data that has been accessed includes customer names, email addresses, phone numbers, delivery addresses, and in some instances, the date of birth of customers, for those who had to prove their age when buying alcohol.
The company added that 1.2 million customers only had their email addresses exposed and noted that the Mydeal.com.au website and app had not been impacted.
According to Woolworths Group chief security officer Pieter van der Merwe, the company’s “cyber security and privacy teams are fully engaged and working closely with MyDeal to support the response”.
“MyDeal does not store payment, driver’s licence or passport details and no customer account passwords or payment details have been compromised in this breach,” Woolworths said in a statement.
Customers who are not contacted have not had their details accessed, Woolworths said in a statement.
The major data breach comes just weeks after 9.8 million Optus customers had their data hacked and Medibank’s announcement of a possible ransomware attack last week.
[Related: AFP details exposed after Colombian government hack]