Lidl's online shop got breached. If you have ever ordered from them in Europe, here is what leaked.

What happened

Attackers stole customer information from a service provider working with Lidl's online shop, exposing first and last names, phone numbers, email addresses, dates of birth, and customer numbers. The exposure covers customers in Germany, Belgium, and the Netherlands. Lidl disclosed the breach July 17, though the underlying theft appears to have happened over the prior week. (Privacy Guides)

"Just a service provider breach" still matters

It's tempting to read "the breach happened at a vendor, not Lidl itself" as a reason to relax. It isn't one. Every company you hand your data to also hands pieces of it to payment processors, shipping partners, email platforms, and analytics vendors, and each of those is a door attackers can try instead of the front one. Your data's exposure risk is the sum of every vendor in that chain, not just the brand on the checkout page.

Why this combination of fields is the dangerous one

Name, phone, email, and birth date together is a genuinely useful kit for a phishing or social engineering attempt, more useful than any one field alone. A convincing text pretending to be your bank or delivery service is a lot more convincing when it can reference your real birth date. If you shop at Lidl online in one of the affected countries, treat the next few weeks of unexpected texts or emails claiming to be from a retailer, bank, or delivery service with extra suspicion, especially anything asking you to click a link or confirm a password.

A quiet week that still wasn't quiet

Privacy Guides called this "a slow week" in their roundup, noting it was the only breach they tracked in the prior seven days. A slow week for the industry still means thousands of people's names, contact details, and birth dates are now sitting somewhere they didn't agree to put them. Slow is a relative word here. (Privacy Guides)

General information, not a security guarantee for your specific situation. See also what to check for after a driver's license breach. You can see what this studio builds at jcmobileappstudio.com/apps.