Lidl Notifies Customers of Third-Party Data Breach

Lidl disclosed that a third-party IT provider experienced unauthorized access to a separately stored customer-data file impacting online-store customers in Germany, Belgium and the Netherlands. Stolen data included names, phone numbers, email addresses, dates of birth and customer numbers; sensitive payment and password data were reportedly not affected. Lidl engaged forensics, notified authorities, and warned customers to be vigilant for phishing and identity-theft attempts.