Flink hackers target customers with direct extortion emails

A hacking collective known as LPG Group has targeted the grocery delivery service Flink, claiming to possess the data of one million customers. In a unique extortion tactic, the hackers directly contacted individual customers via email, using their full names, addresses, and email addresses to demand small payments of approximately 0.005 ether (roughly 10 to 15 euros) in cryptocurrency. Failure to pay would result in the release of personal data on the dark web.

As of the deadline, blockchain analysis indicates that no customers have paid the ransom. The group also issued a larger demand to Flink, requesting 100 ether (approximately 238,000 euros) to delete all stolen data. Cybersecurity experts, including Pim Takkenberg from Northwave, have advised customers not to pay, noting that there is no guarantee data will actually be deleted.

The incident has highlighted a growing sense of “data leak fatigue” among consumers. Experts suggest that frequent breaches lead to a lack of urgency, though digital rights advocates warn that such leaks can have severe consequences for vulnerable individuals. The Flink attack follows a series of recent breaches affecting other major organizations, including DA and Polarsteps.