Customer data copied in breach at Dutch gift and flower websites

Personal data belonging to customers of Dutch gift and flower websites Topgeschenken.nl, Topbloemen.nl and Toptaarten.nl was copied and exported after unauthorised access to the company’s IT systems, the business says. The investigation is still under way, and it has not yet established how many people or organisations were affected.

The company says the data included names, postal addresses, email addresses, dates of birth, gender and telephone numbers belonging to customers and gift recipients. It says financial details, including bank account and credit card numbers, were not involved because it does not store them.

Topgeschenken says it discovered the breach on 5 November, ended the unauthorised access and took its systems temporarily offline as a precaution. It is investigating the incident and working on restoring its services securely. The company has not said how long that will take.

Customers can place, change or cancel orders only on a limited basis, but existing orders are still due to be delivered as planned. The company says its customer service remains available by email and WhatsApp, although responses may take longer because staff have restricted access to some systems.

The incident has been reported to the Dutch Data Protection Authority, and the company says it plans to report it to the police. It has urged customers to watch for suspicious messages or calls that could be attempts at phishing or fraud.