Department store data breach exposes Goodie club customer information

Unauthorised individuals gained access to parts of Magasin's computer systems. Customers in the loyalty club Goodie have been warned that their personal data may have been compromised.

Magasin hit by data breach: names, addresses and purchase history exposed

Unauthorised individuals have gained access to parts of the Danish department store chain Magasin's computer systems, according to The Copenhagen Post. Magasin confirmed the incident in an email to DR.

Following the breach, Magasin warned members of its loyalty club, Goodie, that their personal information may have been compromised. The exposed data includes names, addresses and purchase history.

"We are working diligently with external experts to handle the incident, including restoring our access to the systems. We have also reported the incident to both the police and the Data Protection Authority," Magasin stated in the email.

Magasin warned that the compromised information could be used to make phishing fraud more credible. Phishing is a type of fraud where scammers attempt to trick people into disclosing personal information – often through fake emails targeting MitID login credentials for banks and public services.

The department store chain emphasised in its message to club members that the security breach did not include credit card information.

"We want to emphasise that we are working to limit the scope of the breach and ensure that something similar does not happen again," the email stated.

The incident at Magasin follows a similar warning that British online retailer Asos sent to its customers a few weeks ago. In that case, an unauthorised individual managed to gain access to an employee account and thereby retrieve information from external platforms that Asos works with. The breach gave access to customer names and contact details. Asos also reported the breach to the police and urged its customers to be vigilant against unexpected calls and messages from individuals claiming to work for the company.

Source: The Copenhagen Post

Read this article in the original language