Lidl Notified Online Shop Customers in Germany, Belgium, and the Netherlands of a Data Breach

**Executive summary:** Lidl notified online shop customers in Germany, Belgium, and the Netherlands that an external IT service provider experienced a security incident in which attackers briefly accessed and stole a separately stored file containing customers' PII (title, name, phone, email, date of birth, customer number). The company confirmed payment data, passwords, and account access were not compromised, has informed the Dutch data protection authority, and the provider reported the incident to police and engaged forensic investigators; however, the exposed data could enable phishing or impersonation attempts.