# Lidl Announces Data Breach Affecting Customers in Germany, Belgium, and Netherlands Customer information stolen in third-party provider attack. - **Source:** [Security Affairs](https://brifing.si/source/e6c4f5ec-3e1b-4152-a932-056243bd56eb) - **Published:** 2026-07-13 - **Topic:** [Business](https://brifing.si/c/business) - **Original article:** - **On Brifing:** https://brifing.si/s/2994bf2b-7edc-49cf-992a-ce426b9615e0 ## Lidl discloses data breach Lidl notified online shop customers in Germany, Belgium, and Netherlands about a data breach. Customer data was stolen in an attack targeting an external IT service provider. The company confirmed payment details remained unaffected by the incident. ## What information was compromised? Stolen data includes titles, full names, phone numbers, email addresses, dates of birth, and customer numbers. Lidl clarified that passwords, billing/delivery addresses, and banking details weren't exposed. Customer accounts remain secure according to official statements. ## How the breach occurred Despite high security standards, attackers briefly accessed a separately stored customer data file at an external provider. Lidl emphasized that the online shop system itself wasn't compromised, only this external backup file was targeted in the attack. ## Regulatory notifications Lidl reported the incident to Autoriteit Persoonsgegevens (Dutch Data Protection Authority). The IT service provider filed a police report and engaged forensic experts. Currently, there's no concrete evidence of actual misuse of the stolen data. ## Potential risks and precautions The stolen personal data could enable phishing attempts. Lidl warned customers to be cautious about unexpected communications and to verify senders before clicking links. Suspicious messages should be reported to data.shop@lidl.be or data.shop@lidl.nl. ## Retail industry implications This incident highlights how third-party vendor vulnerabilities can impact major brands. Retailers must reassess supply chain security and implement layered protections for customer data, especially when using external service providers. ## Sources covering this story - https://securityaffairs.com/195270/data-breach/lidl-notified-online-shop-customers-in-germany-belgium-and-the-netherlands-of-a-data-breach.html — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._