Bad news for the customers of the MyDeal online marketplace, the Australian retail giant Woolworths disclosed a data breach that impacted approximately 2.2 million of them.
As soon the company became aware of the security breach it blocked access to all affected systems.
In September 2020, 80% of MyDeal were acquired by Woolworths, anyway Woolworths was not impacted by the security breach.
The attackers gained access to the MyDeal customer relationship management (CRM) system by exploiting a user’s compromised credentials.
Compromised customer data include name, email address, phone number, delivery address and, for some individuals, the date of birth. Payment, drivers’ licence, or passport details were accessed because MyDeal does not store this information. Also, no customer account passwords were accessed.
The company has already contacted all the impacted customers.
