Lidl Discloses Online Shop Breach After Service Provider Hack

Lidl disclosed that a third-party service provider used by its online shop was hacked, exposing customer personal data (names, emails, delivery addresses and possibly phone numbers, order history, and hashed credentials) for customers in Germany, Belgium, and the Netherlands; the report outlines likely data categories exposed, GDPR notification responsibilities, recommended customer actions (password changes, MFA, vigilance for phishing), and highlights the systemic supply-chain risk for retailers.