Woolworths states that data of 2.2 million customers of its MyDeal website has been exposed.
Today, MyDeal, which is majority owned by Woolworths, announced that “identified that a compromised user credential was used to gain unauthorised access to its Customer Relationship Management (CRM) system resulting in the exposure of some customer data”.
The company is currently emailing the 2.2 million people affected by the situation. Woolworths said in a statement.
Woolworths confirmed that hackers have accessed customer names, email addresses, phone numbers, delivery addresses, and in some cases date of birth for anyone who has had to confirm their age when buying alcohol. Whereas for 1.2 million customers, only their email addresses were exposed.
“MyDeal does not store payment, drivers licence or passport details and no customer account passwords or payment details have been compromised in this breach,” Woolworths said.
The Mydeal.com.au website and app had not been impacted, it said.