Lidl Discloses Third-Party Data Breach Impacting Online Shoppers in Germany, Belgium, and the Netherlands
Lidl has notified customers of its online shops in Germany, Belgium, and the Netherlands about a data breach stemming from a cyberattack on an external IT service provider. The incident, discovered earlier this month, exposed personal data including names, phone numbers, email addresses, dates of birth, and customer numbers but did not compromise payment information, passwords, or billing details.
The breach occurred when unidentified attackers briefly accessed a segregated file containing customer data, despite the service provider’s security measures. Lidl confirmed that its online shop systems remained unaffected. In the Netherlands, the company reported the incident to the Autoriteit Persoonsgegevens (Dutch Data Protection Authority), while the compromised provider filed a police report and engaged forensic experts to assess the full impact.
While Lidl stated there is no current evidence of data misuse, the exposed information such as names, emails, and dates of birth could be exploited for phishing or impersonation scams. The company issued separate notifications in Belgium and the Netherlands, reiterating that customer accounts were not directly breached. The incident highlights the risks of third-party vulnerabilities in supply chain security.
Lidl Nederland cybersecurity rating report: https://www.rankiteo.com/company/lidl-nederland
"id": "LID1783975270",
"linkid": "lidl-nederland",
"type": "Breach",
"date": "7/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Online shoppers in Germany, '
'Belgium, and the Netherlands',
'industry': 'Retail/Grocery',
'location': 'Germany, Belgium, Netherlands',
'name': 'Lidl',
'type': 'Retail'}],
'attack_vector': 'Third-party compromise',
'customer_advisories': 'Notifications issued in Belgium and the Netherlands '
'warning of potential phishing or impersonation scams',
'data_breach': {'personally_identifiable_information': 'Names, phone numbers, '
'email addresses, '
'dates of birth, '
'customer numbers',
'sensitivity_of_data': 'Moderate (names, phone numbers, email '
'addresses, dates of birth, customer '
'numbers)',
'type_of_data_compromised': 'Personal data'},
'description': 'Lidl has notified customers of its online shops in Germany, '
'Belgium, and the Netherlands about a data breach stemming '
'from a cyberattack on an external IT service provider. The '
'incident exposed personal data including names, phone '
'numbers, email addresses, dates of birth, and customer '
'numbers but did not compromise payment information, '
'passwords, or billing details.',
'impact': {'data_compromised': 'Personal data (names, phone numbers, email '
'addresses, dates of birth, customer numbers)',
'identity_theft_risk': 'Phishing or impersonation scams',
'payment_information_risk': 'None',
'systems_affected': "External IT service provider's segregated "
'file'},
'investigation_status': 'Ongoing (forensic assessment)',
'lessons_learned': 'Highlights the risks of third-party vulnerabilities in '
'supply chain security',
'post_incident_analysis': {'root_causes': 'Third-party IT service provider '
'compromise'},
'references': [{'source': 'Lidl customer notifications'}],
'regulatory_compliance': {'regulatory_notifications': 'Reported to Autoriteit '
'Persoonsgegevens '
'(Dutch Data Protection '
'Authority)'},
'response': {'communication_strategy': 'Customer notifications issued in '
'Belgium and the Netherlands',
'law_enforcement_notified': 'Police report filed by the '
'compromised provider',
'network_segmentation': 'Segregated file accessed',
'third_party_assistance': 'Forensic experts engaged'},
'threat_actor': 'Unidentified attackers',
'title': 'Lidl Discloses Third-Party Data Breach Impacting Online Shoppers in '
'Germany, Belgium, and the Netherlands',
'type': 'Data Breach'}