data of 500,000 customers stolen

The distributor Auchan was “the victim of a cyberattack”, targeting “part of the personal data” of more than 500,000 customers “associated with a loyalty account”, said a spokesperson for the group this Tuesday.

Banking data “not affected”

This data concerns “the last name, first name, email address, postal address, telephone number, family composition if provided, date of birth, loyalty card number and the amount of the prize pool loyalty,” detailed this spokesperson. On the other hand, “banking data, passwords and PIN codes for loyalty cards are not affected”, she assured, specifying that the incident had been “contained” and “vigilance reinforced”.

This attack was notified to the National Commission for Information Technology and Liberties (Cnil) and to customers, she continued. “All necessary measures were taken immediately to put an end to this attack and strengthen the protection of our information systems,” Auchan said in an email to its customers. In this letter, the company invites its customers “to exercise the greatest vigilance at the risk of fraudulent emails, SMS or calls”.