Westfield Mall of the Netherlands Suffers Data Breach, Exposing Personal Information
Westfield Mall of the Netherlands, the country’s largest indoor shopping center, has confirmed a data breach affecting members of its loyalty program and newsletter subscribers. Unauthorized access to a database exposed personal details, including first and last names, email addresses, phone numbers, postal codes, and dates of birth.
The breach, disclosed via email to affected customers, did not compromise financial data such as bank account numbers, credit card details, or passwords. While there is no evidence yet of data misuse, the mall has warned of potential phishing risks, urging members to remain cautious of unsolicited communications.
The incident has been reported to Dutch data protection authorities, and URW, the mall’s operator, has filed a formal complaint. The full scope of the breach, including the number of affected individuals, remains unclear.
Unibail-Rodamco-Westfield cybersecurity rating report: https://www.rankiteo.com/company/unibail-rodamco-westfield
URW Netherlands cybersecurity rating report: https://www.rankiteo.com/company/westfield-mall-of-the-netherlands
"id": "UNIWES1773066889",
"linkid": "unibail-rodamco-westfield, westfield-mall-of-the-netherlands",
"type": "Breach",
"date": "3/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Loyalty program members and '
'newsletter subscribers',
'industry': 'Retail',
'location': 'Netherlands',
'name': 'Westfield Mall of the Netherlands',
'type': 'Shopping Center'}],
'customer_advisories': 'Warning about potential phishing risks',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'Personally Identifiable Information '
'(PII)',
'type_of_data_compromised': ['First and last names',
'Email addresses',
'Phone numbers',
'Postal codes',
'Dates of birth']},
'description': 'Westfield Mall of the Netherlands, the country’s largest '
'indoor shopping center, has confirmed a data breach affecting '
'members of its loyalty program and newsletter subscribers. '
'Unauthorized access to a database exposed personal details, '
'including first and last names, email addresses, phone '
'numbers, postal codes, and dates of birth.',
'impact': {'data_compromised': 'Personal details (first and last names, email '
'addresses, phone numbers, postal codes, dates '
'of birth)',
'identity_theft_risk': 'Potential phishing risks',
'payment_information_risk': 'None (financial data not '
'compromised)'},
'investigation_status': 'Ongoing',
'recommendations': 'Affected individuals urged to remain cautious of '
'unsolicited communications (phishing risks)',
'references': [{'source': 'Incident disclosure email'}],
'regulatory_compliance': {'regulatory_notifications': 'Reported to Dutch data '
'protection '
'authorities'},
'response': {'communication_strategy': 'Email notification to affected '
'customers',
'law_enforcement_notified': 'Formal complaint filed'},
'title': 'Westfield Mall of the Netherlands Data Breach',
'type': 'Data Breach'}