Woolworths owned MyDeal hacked with 2.2 million users personal information accessed

The details of nearly 2.2 million Australians have been made public in a new breach after Woolworths-owned MyDeal found that a ‘compromised user credential’ had been used to access its systems.

The leak comes just weeks after Optus suffered a breach that compromised data of up to 10 million customers, which in turn has prompted a revision of consumer privacy rules in the country.

Information leaked from MyDeal’s system includes names, email addresses, phone numbers, delivery addresses and date of birth of some customers.

Woolworths said in a statement Friday that MyDeal is in the process of contacting all affected customers by email.

“MyDeal customers who were not approached by MyDeal were not given access to their data during the breach,” the statement reads.

“Woolworths Group and MyDeal have also partnered with relevant regulatory and government agencies.”

MyDeal clarified that their website and application were not affected and that no other Woolworths group platforms were at risk.

MyDeal is 80 percent owned by the Woolworths Group and said they would contact all affected customers and work with authorities to investigate the incident.

Woolworths announced in May that they would be acquiring MyDeal, an online retail company.

At the time of the acquisition, Brad Banducci, CEO of Woolworths, said: “The addition of MyDeal to the Woolworths Group is another step towards delivering a more holistic customer experience across food and everyday needs and expands our market opportunities. significantly, especially in general merchandise.”

More to come.