The threat is a third-party supply chain attack where unidentified actors breached an IT service provider for Lidl, gaining brief access to a separate file containing customer data. The article does not provide a CVSS score, specific affected software versions, a fixed version, or a technical workaround, as the details of the service provider's specific vulnerability are not disclosed.
German discount supermarket chain Lidl has notified customers in Germany, Belgium, and the Netherlands that customer data was stolen after attackers breached one of its IT service providers. In notices published on its support websites in Belgium and the Netherlands, Lidl said it was informed of the incident last week. “Despite high IT security standards, unidentified individuals were briefly able to access a separately stored file containing customer data and steal some of it. The … More → The post Hackers breach Lidl’s IT service provider, steal customer data appeared first on Help Net Security .