What customer data may have been compromised in the Lidl breach?

Lidl confirmed that attackers accessed customer personal data, but payment details were not affected. The exact list of compromised information has not been disclosed.

Why isn’t Lidl providing full incident details?

The company cites an ongoing investigation and regulatory compliance requirements. Further details may be released after the analysis is complete.

How can users protect their data after this breach?

Experts recommend monitoring accounts for suspicious activity, enabling two-factor authentication, and updating passwords regularly. Lidl also advises customers to watch for phishing attempts.

← All news

Security

Lidl Reports Online Store Breach via Third-Party Service Provider Vulnerability

July 13, 2026

Photo: BleepingComputer

Quick answer

Lidl revealed a data leak affecting customers in Germany, Belgium, and the Netherlands after a breach at its third-party service provider.

German retail giant Lidl has reported a cybersecurity incident in which threat actors gained access to customer personal data from its online store. The breach occurred due to a hack targeting a third-party service provider managing the retailer’s platform in Germany, Belgium, and the Netherlands.

In its official notice, Lidl stated that the attack did not impact payment processing systems, which operate independently. However, user personal data—including names, addresses, and contact details—may have been compromised. The full extent of the incident remains undisclosed.

Lidl emphasized that the investigation is ongoing, with the company collaborating with law enforcement and regulators. Customers are advised to exercise caution when receiving suspicious messages and to monitor their account activity closely.

Cybersecurity experts highlight that attacks on third-party providers are becoming increasingly common. Such incidents underscore the need for stronger supply chain security and the implementation of multi-layered defense systems.

Common questions

What customer data may have been compromised in the Lidl breach?: Lidl confirmed that attackers accessed customer personal data, but payment details were not affected. The exact list of compromised information has not been disclosed.
Why isn’t Lidl providing full incident details?: The company cites an ongoing investigation and regulatory compliance requirements. Further details may be released after the analysis is complete.
How can users protect their data after this breach?: Experts recommend monitoring accounts for suspicious activity, enabling two-factor authentication, and updating passwords regularly. Lidl also advises customers to watch for phishing attempts.

Dzen feed: /feed/dzen.xml · RSS: /feed.xml