Dis-Chem has issued a notice on its website alerting customers that one of its third-party service providers suffered a data compromise, affecting 3.68m of its customers.

Dis-Chem said an investigation of the breach – which it became aware of on 1 May – revealed that hackers were able to gain access to the names, email addresses and cellphone numbers of the affected customers on 28 April 2022.

The retailer assured customers that there was no indication that their information had been published or used by the hackers.

However, it did also warn that this might not be the case for long, reports Moneyweb.

‘Based on the categories of personal information impacted, there is a possibility that any impacted personal information may be used by the unauthorised party to commit further criminal activities, such as phishing attacks, emails compromises, social engineering and/or impersonation attempts,' the notice reads.

The group did not mention the third-party service provider that was hit by the cyber attack.

Full Moneyweb report