Simian data breach exposes customer data and credit card details
Attackers got hold of personal data and credit card information.
Image by Cybernews.
- Simian, parent of Drukland, Reclameland, and Flyerzone, confirmed a data breach at a third-party service provider affecting 500,000+ customers.
- Stolen data includes usernames, email addresses, hashed passwords, and credit card details for a limited number of customers.
- Simian reset all passwords, blocked affected accounts, and hired an external cybersecurity firm to investigate the breach.
- Simian confirmed this breach is unrelated to the separate CEVA Logistics data breach affecting Ajax, ING, and bol.
Key Takeaways by nexos.ai, reviewed by Cybernews staff.
Online printing company Drukland is warning customers in the Netherlands and Belgium about a data breach that happened at one of parent company Simian’s service providers.
Simian is an online printing company with over 500,000 customers in the Netherlands and Belgium. All of the parent company’s subbrands – Drukland, Reclameland, and Flyerzone – have been affected by the “security incident.”
According to one of Simian’s subsidiaries, the attackers managed to access personal information of its clients, including usernames, email addresses, and hashed passwords. What hashing algorithm was used remains unknown.
In response to questions from news agency ANP, a company spokesperson has confirmed that credit card information from a limited number of customers was also compromised in the breach. They have been informed of this personally. The spokesperson wouldn’t say how many customers were affected.
Immediately after the incident, Simian implemented additional security measures, including blocking all affected system accounts, resetting all users’ passwords, further restricting access to systems, and changing system passwords.
In addition, the online printing company continues to monitor the situation closely and promises to take additional measures if necessary.
Stay updated with our latest stories and follow us on social media
Be the first to discover new stories, ideas, and updates from our team.
The breach did not originate directly at Simian itself, but at one of the company’s external service providers. Once it came to light, Simian called in an external cybersecurity firm to investigate the incident.
“Criminals may try to exploit this information, for example through scams or phishing,” Simian’s subsidiary Drukland says on an incident page.
Affected customers should be vigilant about phishing, identity fraud, impersonation, and social engineering attempts to collect additional personal information.
Simian emphasizes that the hack is not related to the data breach at CEVA Logistics, which occurred earlier this month.
Last week, several victims reported being affected by a potential data breach at CEVA Logistics, including the Dutch department store De Bijenkorf, the online retailer bol, the Dutch soccer club Ajax, the financial institution ING, and the optician chain Ace & Tate.
