A data breach at a Woolworths-owned online retailer, MyDeal, has left millions of customers’ personal information exposed.
The breach affects customers who have shopped on MyDeal’s website or app in the past and includes names, email addresses, and phone numbers.
Woolworths has confirmed that the breach occurred on Friday, and that they are working with authorities to investigate the matter.
Approximately 2.2 million people have been affected by the data breach.
This is the latest in a string of data breaches to hit Australian companies. Recently, Optus and Medibank have all had customer data compromised.
Woolworths Group said it was aware of the incident and was working with MyDeal to understand the full extent of the data breach.
A spokesman for the Woolworths Group said MyDeal was reaching out to affected customers but that payment details, driver’s licences, and passwords had not been stolen.
“We take the security of our customers’ data very seriously and are committed to protecting it,” the spokesperson said.
“We apologise for any inconvenience caused and will keep our customers updated as we investigate further.”
Woolworths is also extending specialist case management support to affected customers with the assistance of IDCARE, Australia’s national identity and cyber support community service.
Sean Senvirtne, chief executive of MyDeal, said that the company had taken quick action to reduce unauthorized access.
“We will keep investigating the incident with relevant authorities and keep our customers updated on any further developments that could affect them,” Mr. Senvirtne said.
This comes weeks after Optus claimed a hacker to have accessed the personal data of 9.8 million Optus customers.
This is a worrying development for customers of MyDeal, who may now be at risk of identity theft and other forms of fraud. Woolworths has advised customers to be vigilant in monitoring their accounts and to report any suspicious activity.
