Albert Heijn franchisee targeted by ransomware attack, passports and personal information stolen
Bun, the largest Albert Heijn franchisee, has fallen victim to a ransomware attack, exposing the sensitive information of approximately 3,500 employees.
Image by Cybernews.
Bun, the largest Albert Heijn franchisee, has fallen victim to a ransomware attack, exposing the sensitive information of approximately 3,500 employees.
According to RTL Nieuws, a Dutch news outlet that has reviewed and verified a sample of the exfiltrated data published on the dark web, hackers managed to steal private details of 3,462 current and former employees, dating back all the way to 2017.
This includes names, residential addresses, dates of birth, marital statuses, Social Security numbers (BSN), nationalities, signatures, and bank account numbers. Medical information about sick leave, copies of passports, and employee contracts were also stolen and published.
Passports and financial documents from Bun’s owners, such as their personal income tax returns, have also been published.
More from Cybernews
Sainsbury’s installs more facial rec tech in stores: Should shoppers be worried?
"Phantom squatting” uses AI hallucinated domains for cyber attacks
What they’re doing to gamers is a robbery in broad daylight
Irish parliament expands Microsoft use, despite the EU’s efforts to ditch it
Can government AI actually scrub UAP footage from the internet?
The EU and Apple CEO Tim Cook held "constructive" talks after their Siri AI dispute in Europe
This type of information can be misused by scammers and fraudsters for criminal activities, such as phishing and identity fraud.
According to Hackmanac, a hacking group called ThreeAM has claimed responsibility for the data breach on October 13th. They claim to have published around 20 percent of the stolen data and threaten to publish more documents soon if Bun does not pay.
Bun was unavailable for comment.
This is the second time within a year that Albert Heijn employees have been affected by a data breach. In November 2024, Ahold Delhaize, Albert Heijn’s parent company, disclosed that a security incident had taken place at the US branch.
INC Ransom, the hacking group responsible for the ransomware attack, claimed to have stolen six terabytes of corporate and personal information of more than 2.2 million people, including names, contact information, dates of birth, ID numbers, financial account information, health information of workers, and employment-related information.
Unlock more exclusive Cybernews content on YouTube.