Lidl customers in Europe hit by third-party data breach

A major data breach at a third-party IT service provider has exposed personal information belonging to customers of the Lidl supermarket chain in several European countries. The German discount retailer confirmed the cyberattack, which compromised data including customer names, phone numbers, email addresses, dates of birth, and customer numbers.

The company stated that the incident occurred at the beginning of the week of July 13, 2026, and was contained quickly. According to Lidl, unknown individuals briefly gained access to a separately stored file containing customer data from its online shops. The company emphasized that its own online shop systems, customer accounts, and passwords were not breached. Payment information, billing addresses, and delivery addresses also remained secure.

Lidl has issued warnings to customers in the Netherlands, Belgium, and Germany, the countries confirmed to be affected. In data breach notifications published on its national websites, the retailer urged heightened vigilance against potential phishing attempts and identity fraud. Officials stated that while there is currently no concrete evidence of the stolen data being misused, the nature of...