Lidl Data Breach Exposes Customer Details in Germany, Belgium, and the Netherlands

Lidl reported that attackers briefly accessed a separately stored customer data file at an external IT service provider, stealing personal information (names, dates of birth, phone numbers, email addresses, and customer numbers) of online-shop customers in Germany, Belgium, and the Netherlands; passwords and payment details were not exposed. Affected customers have been notified, authorities and regulators informed, and the incident underscores risks from third-party vendors and the potential for targeted phishing and identity-fraud attempts.