{"id":"lidl-online-shop-customer-breach-jul-2026","category":"breach","status":"closed","title":"Lidl online shop customer details stolen through IT service provider","tldr":"Attackers stole Lidl online shop customers’ personal details in Germany, Belgium and the Netherlands through an IT provider. Lidl says passwords and payment details were unaffected. Watch for convincing fake Lidl messages and verify them independently.","summary":"Lidl began notifying affected online shop customers by 10 July after attackers briefly accessed a separately stored customer file at an IT service provider and stole some of its contents. Customers in Germany, Belgium and the Netherlands were affected. The stolen information included salutations, names, email addresses, telephone numbers, dates of birth and customer numbers. Lidl said its online shop and customer accounts were not compromised, and excluded passwords, billing and delivery addresses, bank details and other payment information. The provider secured the affected systems, filed a police report and brought in forensic investigators; Lidl notified data protection authorities. Lidl said it had no concrete evidence of misuse, but warned about phishing and identity fraud. As at 3 November, no affected-customer count, provider name or final investigation outcome was found in the public sources reviewed.","action":"If Lidl notified you, watch for unexpected emails, texts or calls that use your personal details. Verify requests through Lidl’s official website before sharing information or following links. There is no software update to install; Lidl says passwords and payment information were unaffected.","product":"Lidl online shop in Germany, Belgium and the Netherlands","audience":"home","severity":"medium","patch":"na","exploited":true,"cves":[],"tags":["lidl","data-breach","retail","third-party","personal-data"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"advisory","title":"Belangrijke informatie over de beveiliging van jouw gegevens bij Lidl","url":"https://service.lidl.nl/html_mail.jsp?params=8LybHsuKa7Kn1nJNHJQVXNX0gmCmtqL%2BDv1%2FqBuU15CDljiqHnnM21YJF1q%2FnFUEywx3Rzgho98wZxcM9Vu14In%2BUF9apXtZuAjldylkmGg%3D","by":"Lidl","date":"2026-07-10"},{"kind":"advisory","title":"Informations importantes concernant la sécurité de vos données chez Lidl","url":"https://customerservice.lidl.be/html_mail.jsp?params=8tKyobllxvsU6%2BgXDYjBJc6MQ853XtdVS6zBsH7vxJZSVH%2FBzLZpSM%2Fxo%2BNkxRbDFx7Qk%2FX0EmHNQMTiaWr%2FGCKi%2FhYKokW6%2FkoUR8Rjn4I%3D","by":"Lidl","date":"2026-07-10"},{"kind":"news","title":"Hackers stelen data van Nederlandse en Belgische klanten Lidl-webshop - update","url":"https://tweakers.net/nieuws/249938/hackers-stelen-data-van-nederlandse-en-belgische-klanten-lidl-webshop.html","by":"Tweakers","date":"2026-07-10"},{"kind":"news","title":"Hacker-Angriff bei Lidl: Discounter von Datendiebstahl betroffen","url":"https://www.teltarif.de/lidl-datendiebstahl-email/news/104634.html","by":"teltarif.de","date":"2026-07-10"},{"kind":"news","title":"Lidl discloses online shop breach after service provider hack","url":"https://www.bleepingcomputer.com/news/security/lidl-discloses-online-shop-breach-after-service-provider-hack/","by":"BleepingComputer","date":"2026-07-13"}],"started":"2026-07-10","closed":"2026-07-13","created":"2026-11-03T21:32:01.604Z","updated":"2026-11-03T21:32:01.604Z","cve_notes":[],"timeline":[{"at":"2026-07-13","added":"2026-11-03T21:25:43.261Z","kind":"other","text":"BleepingComputer reported that customers in Germany were also affected. Lidl told the publication it had no concrete evidence of misuse and confirmed that customer accounts, passwords, addresses and payment information were unaffected.","url":"https://www.bleepingcomputer.com/news/security/lidl-discloses-online-shop-breach-after-service-provider-hack/","by":"BleepingComputer","patch":null},{"at":"2026-07-10","added":"2026-11-03T21:25:43.261Z","kind":"other","text":"Lidl's customer notice said the provider had restored security, reported the incident to police and engaged forensic investigators. Lidl notified the Dutch data protection authority and warned customers about phishing and identity fraud.","url":"https://service.lidl.nl/html_mail.jsp?params=8LybHsuKa7Kn1nJNHJQVXNX0gmCmtqL%2BDv1%2FqBuU15CDljiqHnnM21YJF1q%2FnFUEywx3Rzgho98wZxcM9Vu14In%2BUF9apXtZuAjldylkmGg%3D","by":"Lidl","patch":null},{"at":"2026-07-10","added":"2026-11-03T21:25:43.261Z","kind":"disclosed","text":"Lidl warned online shop customers in the Netherlands and Belgium that attackers had stolen personal information from a separate file held by an IT service provider.","url":"https://tweakers.net/nieuws/249938/hackers-stelen-data-van-nederlandse-en-belgische-klanten-lidl-webshop.html","by":"Tweakers","patch":"na"}],"url":"https://hard.fyi/live/lidl-online-shop-customer-breach-jul-2026/","json":"https://hard.fyi/api/live?id=lidl-online-shop-customer-breach-jul-2026"}