DA drugstore chain reports data breach affecting 236,000 customers

The drugstore chain DA has reported a data breach affecting approximately 236,000 customers of its webshop. On September 4, unauthorized individuals gained access to a customer database hosted on an external server.

The compromised information includes names, email addresses, telephone numbers, dates of birth, residential addresses, and order history. While the company stated there are no definitive indications that the file was actually downloaded, they cannot rule out the possibility that the data was stolen.

DA has reported the incident to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) and blocked access to the database once the breach was discovered. The company clarified that the breach is limited to webshop customers; data from customers who only shop at their more than 300 physical retail locations was not included in the affected database.

Customers have been notified via email and advised to remain vigilant against phishing attempts, as the combination of personal details and order history could be used to create highly convincing fraudulent communications.