Flink customers and staff targeted with payment requests after data breach

Flink has confirmed a data breach after cybercriminals began contacting its customers and employees with payment requests, ANP reported on 25 September. The confirmation followed reporting by Dutch broadcaster NOS. [1]

The rapid grocery delivery company said unauthorised parties had accessed data in one of its internal systems. It said passwords, payment details, bank account details and payment card details were not affected. Flink has not disclosed which data was taken or how many people were affected. [1]

ANP cited NOS as reporting that the attackers claimed to hold data belonging to 1 million customers and 13,000 employees. NOS said the information might include names, email addresses, postal addresses, phone numbers and order histories. [1]

NOS had reviewed communications from the attackers and reported requests for around €10–€15 per person in cryptocurrency, according to ANP. Flink did not specify the nature of the payments being requested. [1]

Flink said it had immediately blocked the access, introduced additional security measures and launched an extensive investigation with external experts. The company also said it had notified privacy regulators and filed a criminal complaint. [1]