According to BleepingComputer, German supermarket chain Lidl notified customers in Germany, Belgium and the Netherlands that attackers stole their personal information in a breach at a service provider; according to 01net, some French customers were also affected [1][2]. Lidl said unknown individuals briefly accessed a separately stored customer file, stealing salutation, names, phone numbers, emails, birth dates and customer numbers, while passwords, addresses and payment data were not affected and the number of victims was not disclosed [1][2]. Lidl notified the Dutch Data Protection Authority and advised affected customers to be wary of phishing attacks that might use the stolen information [1].
German discounter Lidl hit via service provider; online shop customer data stolen across several European countries
1 min read
- Disclosed
- Jul 13, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 11, 2026
- CVSS basis
- Our assessment
- Technology
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Retail
What to do nowOur advice
- Be wary of phishing emails and texts using Lidl's name or your stolen details [1].
Timeline
Technical details
Remediation
Vendor guidance
- 1Beware of phishing verify[1]
Watch for phishing emails and texts using the stolen data.
References
Media2
- [1]BleepingComputer2026-07-13Accessed 2026-11-11Snapshot 2026-11-11 sha256 79f07863b278
“German discount supermarket chain Lidl notified customers in Germany, Belgium, and the Netherlands that attackers stole their personal information in a breach at a service provider.”
- [2]01net
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.