Tesco service is run by currency giant Travelex for orders made over the telephone and online.
It confirmed that 17,000 Tesco Travel Money customers have had personal information stolen, including full names and addresses.
The compromise also includes e-mails sent from staff to customers, and internally.
Those who have purchased their currency online or over the telephone at Tesco to collect in the branch or delivered at home could have been hit.
No financial information has been disclosed.
It is investigating how the data breach happened.
TPRM report: https://scoringcyber.rankiteo.com/company/-tesco
"id": "tes20379622",
"linkid": "-tesco",
"type": "Data Leak",
"date": "03/2018",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"
{'affected_entities': [{'customers_affected': 17000,
'industry': 'Retail',
'name': 'Tesco Travel Money',
'type': 'Retail'}],
'data_breach': {'number_of_records_exposed': 17000,
'personally_identifiable_information': ['Full names',
'Addresses'],
'type_of_data_compromised': ['Personal Information',
'Emails']},
'description': 'A data breach at Tesco Travel Money, run by Travelex, has '
'resulted in the theft of personal information of 17,000 '
'customers, including full names and addresses. Emails sent '
'from staff to customers and internally were also compromised. '
'No financial information was disclosed. The incident is under '
'investigation.',
'impact': {'data_compromised': ['Full names', 'Addresses', 'Emails']},
'investigation_status': 'Under Investigation',
'title': 'Tesco Travel Money Data Breach',
'type': 'Data Breach'}