MyDeal

Woolworths' MyDeal subsidiary suffered a data breach that affected its 2.2 million customers.

The hacker used compromised user credentials to access the company's Customer Relationship Management (CRM) system which allowed them to view and export customer information.

Information like names, email addresses, phone numbers, delivery addresses, and in some cases, birth dates were exposed in the attack.

MyDeal sent the data breach notifications to affected customers after the hackers began to sell the stolen data on a hacking forum for $600.

Source: https://www.bleepingcomputer.com/news/security/mydeal-data-breach-impacts-22m-users-stolen-data-for-sale-online/

"id": "MYD2031281022",
"linkid": "mydeal.com.au",
"type": "Breach",
"date": "10/2022",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"