Intermarché Confirms Cyberattack Exposing Data of Nearly 300,000 Drive Customers
On August 3, 2026, French retailer Intermarché disclosed a cyberattack targeting its online grocery service, Drive Intermarché, compromising the personal data of 287,605 customers. The breach, first reported by cybersecurity outlet French Breaches, exposed names, postal addresses, phone numbers, birthdates, loyalty card numbers, and partial order histories but no financial or email data.
The attack occurred the prior week, prompting Intermarché to notify France’s data protection authority (CNIL) and file a complaint with the Paris public prosecutor’s office. While the company confirmed that no banking details, loyalty point balances, or passwords were accessed, it warned affected customers about potential phishing risks, as attackers could use the stolen data to craft convincing scams.
Investigations are ongoing to determine whether additional users were impacted. Intermarché serves approximately 2 million Drive customers, though the breach currently affects roughly 14% of them. The incident underscores the growing threat of data exploitation in retail cyberattacks.
Intermarché TPRM report: https://www.rankiteo.com/company/intermarche
"id": "int1785795903",
"linkid": "intermarche",
"type": "Breach",
"date": "8/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '287,605',
'industry': 'Retail/Grocery',
'location': 'France',
'name': 'Intermarché',
'type': 'Retailer'}],
'customer_advisories': 'Warning about potential phishing risks',
'data_breach': {'number_of_records_exposed': '287,605',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'Personally identifiable information '
'(PII)',
'type_of_data_compromised': ['Names',
'Postal addresses',
'Phone numbers',
'Birthdates',
'Loyalty card numbers',
'Partial order histories']},
'date_detected': '2026-07-27',
'date_publicly_disclosed': '2026-08-03',
'description': 'French retailer Intermarché disclosed a cyberattack targeting '
'its online grocery service, *Drive Intermarché*, compromising '
'the personal data of 287,605 customers. The breach exposed '
'names, postal addresses, phone numbers, birthdates, loyalty '
'card numbers, and partial order histories but no financial or '
'email data.',
'impact': {'data_compromised': 'Personal data of 287,605 customers',
'identity_theft_risk': 'Potential phishing risks',
'payment_information_risk': 'None (no banking details exposed)',
'systems_affected': 'Drive Intermarché (online grocery service)'},
'investigation_status': 'Ongoing',
'references': [{'source': 'French Breaches'}],
'regulatory_compliance': {'regulations_violated': 'GDPR (assumed, due to CNIL '
'notification)',
'regulatory_notifications': 'CNIL (France’s data '
'protection authority)'},
'response': {'communication_strategy': 'Customer advisories issued about '
'phishing risks',
'law_enforcement_notified': 'Yes (Paris public prosecutor’s '
'office)'},
'title': 'Intermarché Cyberattack Exposing Data of Nearly 300,000 Drive '
'Customers',
'type': 'Data Breach'}