Ace & Tate said logistics partner CEVA Logistics told it on August 1, 2026 that an unauthorized party accessed systems used to process its orders, and on September 10 CEVA confirmed customer data had been viewed and copied [1]. Possibly affected data include names, emails, delivery and billing addresses, phone numbers and order details; the company notified the Dutch DPA and UK ICO and emailed affected customers again on September 14 [1]. Ace & Tate reminds customers never to share passwords or payment details by email, phone or text [1].
Backfill: this event became public on Sep 14, 2026 and we added it on Nov 11, 2026. It is not a new event.
LowMonitoringBackfillOfficially confirmed
Dutch eyewear brand Ace & Tate: logistics partner CEVA breached, customer order data copied
1 min read
- Disclosed
- Sep 14, 2026
- Occurred
- Aug 1, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 11, 2026
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
Timeline
Technical details
Remediation
Vendor guidance
- 1Never share passwords or payment data verify[1]
Never share passwords or payment details by email, phone or SMS.
References
Official / primary1
- [1]Ace & Tate2026-09-14Accessed 2026-11-11Snapshot 2026-11-11 sha256 9a9ec4820b10
“Am 10. September 2026 hat CEVA bestätigt, dass personenbezogene Daten von Ace & Tate-Kundinnen und -Kunden tatsächlich eingesehen und aus den Systemen kopiert wurden.”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.