LAWSON ID breach affects 2,155,345 records; official notice warns of unexpected messages

LAWSON said on 8 October that its LAWSON ID account service and LAWSON App reservation service had been accessed by a third party and that some customer personal data had leaked; a 7 October review found the LAWSON ID access occurred from 12 to 14 September and the reservation-service access on 17 September, and it said it had not found other intrusions or malware ^[1]. LAWSON ID covers 2,155,345 records; the page lists names, dates of birth, sex, phone numbers and addresses, and a 24 October update said email addresses and newsletter-preference data had not leaked, while dates of birth may have. LAWSON App reservation covers 26 records, including names, phone numbers and part of a credit-card number. The company said it had blocked suspicious sources, temporarily halted reservations (later resumed) and reported the matter to the Personal Information Protection Commission ^[1]. It asked people to be careful with unexpected emails, SMS or calls to addresses registered on an affected LAWSON ID, and to contact the official customer-service form if they have questions ^[1].

Industries mainly affected: Retail

1. Be careful with unexpected emails, SMS or calls sent to contacts registered on an affected LAWSON ID .