Cyberattack at Intermarché: data of nearly 300.000 customers stolen

Intermarché was the victim of a cyberattack that allowed unauthorized access to the personal information of 287,605 users of its Drive service. The incident, which occurred last week, has been reported to the French Data Protection Authority (CNIL). The Mousquetaires Group has also filed a complaint with the Paris public prosecutor's office.

The exposed data includes names, surnames, telephone numbers, postal addresses, dates of birth, and loyalty card numbers. Some information regarding online orders was also accessed. The company specifies, however, that no passwords, email addresses, bank details, or loyalty points balances were compromised.

Intermarché now fears attempted fraud

Affected customers have been notified individually and urged to remain vigilant. The stolen information could be used to personalize fraudulent messages and make phishing attempts more convincing. Scammers could, for example, impersonate Intermarché to request order confirmation or bank details.

The retailer is continuing its investigation to determine if other users are among the victims. Approximately two million people use Intermarché's Drive service, which leaves open the possibility of a larger number of victims. Even without directly compromised banking data, the precision of the stolen information increases the risk of identity theft and requires customers to carefully check every call or message received in the name of the retailer.