# Retail sector cyberattacks and data breaches

> Live situation record from CLSTR: https://clstr.news/situations/retail-sector-cyberattacks-and-data-breaches
> Updated: 2026-10-21T04:33:00.000Z. Sources: 10. Developments: 2.

Recent incidents involving retail and logistics entities have resulted in the exposure of customer personal information. 

In late September, Carrefour warned customers of a data breach stemming from a cyberattack on its external logistics provider, Shipup. The breach, caused by a software flaw, involved the theft of names, email addresses, and telephone numbers, though internal IT systems and banking details remained secure. 

In October, the Danish department store Magasin reported a security breach that began on October 18. Unauthorized access to IT systems disrupted operations and potentially exposed names, contact details, addresses, and purchase histories for both customers and employees. Magasin confirmed that credit card information was not compromised and has reported the incident to the police and the Danish Data Protection Agency.

## Timeline

### 2026-10-21: Magasin reports data breach following cyberattack

Danish retailer Magasin has experienced a cyberattack potentially exposing customer and employee personal data, including names and addresses, though credit card information remains secure.

6 sources. https://clstr.news/cluster/magasin-reports-data-breach-following-cyberattack

### 2026-09-30: Carrefour warns of customer data breach via logistics partner

Carrefour warned customers of a data breach at logistics partner Shipup, exposing names, emails, and phone numbers, though banking details and internal systems remain secure.

4 sources. https://clstr.news/cluster/carrefour-warns-of-customer-data-breach-via-logistics-partner

---
Cite as: Retail sector cyberattacks and data breaches. CLSTR, https://clstr.news/situations/retail-sector-cyberattacks-and-data-breaches