SUPERDRUG HACK ON 20,000 CUSTOMERS

28 August 2018

Superdrug have recently announced that they have been the target of a data hack, with a warning to customers that their personal data may have been stolen.

The health and beauty chain admitted that they had been contacted by someone who appears to be a hacker, claiming that they have obtained personal data from approximately 20,000 customers.

A spokeswoman from Superdrug stated:

“The hacker shared a number of details with us to try and prove he had customer information – we were then able to verify they were Superdrug customers from their email and log-in”.

The company also confirmed that 386 accounts had been access, including customers’ names, addresses, data of birth, phone number, and Superdrug balance points, however luckily no card information was obtained.

They sent out an email to their customers, in addition to a confirmation on Twitter stating:

“To Customers who have received an email from us today, this email is genuine. We recommend you follow the steps outlined”

There has been some backlash to this tweet and the email, which consisted of one angry customer stating:

“Not even an apology. Your responsibility to keep our information. Disappointed”.

 Whilst another customer described the tweet as “cagey and cryptic”.

Companies need to be aware of potential data hacks and should take the necessary precautions in order to protect their own information as well as their customers.

Here at Three Graces Legal we can help you protect your organisation from a potentially dangerous hack. Please contact us on 0151 659 1070 to see how we may be of assistance.