started · updated
Flink suffers cyberattack and faces customer extortion
The grocery delivery service Flink has confirmed a cyberattack involving unauthorized access to an internal ordering system at a local warehouse. The breach, reportedly facilitated by the credentials of a former employee, has resulted in the theft of personal data.
In an unusual 'triple extortion' tactic, the attackers—identified as the LPG Group—are bypassing the company and contacting customers directly via email. The hackers are demanding 0.005 ETH (approximately 10-11 EUR) from each individual customer, aiming to collect a total of 100 ETH (roughly 230,000 EUR) to delete the stolen data. If the target sum is not met, the group threatens to sell the information on the dark web.
The stolen data includes names, email addresses, phone numbers, and delivery addresses. In some instances, specific delivery notes such as floor numbers or doorbell names may have been compromised. Flink has stated that passwords, bank details, and credit card information were not affected and has refused to engage in negotiations with the criminals.
Entities
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 3 SOURCES] Flink refuses to negotiate or engage with criminals. www.t-online.de · unternehmer.de · www.techbook.de
- [● 5 SOURCES] Flink confirmed unauthorized access to its systems. www.t-online.de · unternehmer.de · wochentlich.de · www.ad-hoc-news.de · www.morgenpost.de
- [● 5 SOURCES] The attackers are demanding 0.005 ETH from each individual customer via email. www.t-online.de · t3n.de · wochentlich.de · www.blocktempo.com · www.techbook.de
- [● 3 SOURCES] The cybercriminal group involved is reportedly known as the LPG Group. unternehmer.de · www.blocktempo.com · www.techbook.de
- [● 5 SOURCES] The attackers claim they will delete all stolen data if they collect a total of 100 ETH. www.t-online.de · t3n.de · wochentlich.de · www.blocktempo.com · www.techbook.de
- [● 6 SOURCES] Passwords and payment information were not affected. www.t-online.de · unternehmer.de · wochentlich.de · www.ad-hoc-news.de · www.blocktempo.com · +1 more
- [● 5 SOURCES] The attackers claim to possess data belonging to one million customers and 13,000 employees. www.t-online.de · unternehmer.de · wochentlich.de · www.ad-hoc-news.de · www.blocktempo.com
- [● 3 SOURCES] Attackers gained access using the credentials of a former employee. www.t-online.de · unternehmer.de · wochentlich.de