Woolworths owned MyDeal hacked with 2.2 million users personal information accessed

The data of almost 2.2million Australians has been exposed in a fresh breach after Woolworths-owned MyDeal identified a ‘compromised user credential’ was used to access its systems. 

The leak comes just weeks after Optus suffered a breach which compromised data of up to 10 million customers in turn triggering an overhaul of the country’s consumer privacy rules. 

Data leaked from MyDeal’s system included names, email addresses, phone numbers, delivery addresses, and some customers date of births.

Woolworths revealed on Friday almost 2.2 million users data was exposed after MyDeal identified that a ‘compromised user credential’ was used to access its systems

See also  Stark before and after pictures highlight scale of devastation from 7.8-magnitude tremor in Turkey

Woolworths said in a statement on Friday that  MyDeal is in the process of contacting all affected customers by email. 

‘MyDeal customers who are not contacted by MyDeal have not had their details accessed in the breach,’ the statement read.

‘Woolworths Group and MyDeal have also commenced engagement with relevant regulatory authorities and government agencies.’

MyDeal said they do not store payment, drivers licence or passport details and no customer account passwords or payment details have been compromised in this breach. 

Data leaked from MyDeal’s system included names, email addresses, phone numbers, delivery addresses, and some customers date of births

MyDeal clarified their website and application were not impacted and no other Woolworths group platforms were compromised.

MyDeal CEO, Sean Senvirtne, said: ‘We apologise for the considerable concern that this will cause our affected customers.’ 

‘We have acted quickly to identify and mitigate unauthorised access and have increased the monitoring of networks,’ he said.

‘We will continue to work with relevant authorities as we investigate the incident and we will keep our customers fully informed of any further updates impacting them.’

Woolworths Group Chief Security Officer, Pieter van der Merwe said Woolworths Group’s cyber security and privacy teams are working collaboratively with MyDeal.

Woolworths announced in May that they would be taking over MyDeal – an online retail company.

At the time of the takeover, Woolworths CEO Brad Banducci said, ‘The addition of MyDeal to Woolworths Group represents a further step towards delivering a more holistic customer experience in food and everyday needs and materially expands our marketplace capabilities, especially in general merchandise.