Dutch online gift retailer confirms its website was hacked, customer data stolen
Topgeschenken.nl reports that it established last week that unauthorized individuals had gained access to its IT system. According to the company, preliminary investigation indicates that these parties accessed systems containing both business and personal data. A portion of that information was copied and exported.
The compromised information consists of names and addresses, email addresses, dates of birth, gender, and telephone numbers. Financial data - such as IBAN numbers and credit card details - are believed to remain secure, as Topgeschenken.nl does not store such information.
The company is still determining precisely which individual and organizations were affected by the cybersecurity incident and the full extent of the breach. Topgeschenken.nl states that it will notify those concerned as soon as greater clarity is available.
Immediately upon discovering the breach on November 5, Topgeschenken.nl terminated the unauthorized access and implemented measures to secure its systems and mitigate further risks. As a precaution, the systems were taken offline temporarily. Additional security measures have since been introduced, and the company is working to restore its services carefully and securely.
Because of the breach and the protective measures taken, employees currently have limited access to certain systems. As a result, responses to inquiries may take longer than usual. Customer service remains reachable by email and WhatsApp.
The incident has been reported to the Data Protection Authority. The company also said that it intends to file a police report.
Orders continue to be delivered as scheduled. Topgeschenken.nl states that delivery operations remain ongoing and that customers need to take no action at present regarding existing orders.
Customers are currently able to place, modify, or cancel orders only to a limited extent. Customers are advised to remain particularly vigilant against phishing and fraud attempts, including unexpected or suspicious messages and phone calls.