Overview
- Smartbox (Bongo) detected unauthorized access on November 3 and says an intruder may have seen customer names and email addresses while payment data and passwords were not exposed.
- Topgeschenken discovered a breach on November 5, found that attackers copied and exported customer and recipient names, addresses, email addresses, birthdates, gender and phone numbers, and immediately cut access and took webshops offline.
- Topgeschenken restored its webshops after security checks on November 10 but warned some payment and voucher options remain unavailable and said customers must set new passwords before logging in.
- Both firms reported the incidents to the Dutch Data Protection Authority, plan police reports, hired external security specialists and warned customers to expect targeted phishing and fraud attempts.
- The exact number of affected people and any link between the two incidents remain unknown, and the breaches follow a wider trend of cyberattacks on Dutch retail and consumer services that raise risks of identity fraud.