Possible data leak at Bol causes order delays and cancellations

Bol.com and De Bijenkorf have warned customers that their personal data may have been leaked during a cyberattack on a logistics warehousing partner. Some orders from these Dutch stores will face delays and cancellations as they temporarily suspend activity with the affected logistics company.

Cyberattack on logistics partner of Bol and De Bijenkorf

On August 1, Bol was informed of a possible cyberattack at logistics warehousing partner CEVA Logistics, which carries out logistics operations for both Bol and De Bijenkorf in the Netherlands. This means that orders fulfilled by the connected distribution centre could be affected.

In a news release, Bol assures that its own systems were not hacked. However, customers whose data was processed at the distribution centre might be at risk, as their name, address, postal code, telephone number and order details could have been accessed. 

“Because personal data of Bol customers may be involved in this incident, Bol has reported this to the Dutch Data Protection Authority. Customers whose data may have been affected are being informed directly,” wrote the online retailer. Customer payment details, passwords and login credentials do not appear to have been leaked, reports NOS.

Orders affected by data leak

As soon as the Dutch retailers were notified of the possible data leak, they “immediately suspended data exchange” with CEVA Logistics. According to Bol, this then also affects part of its logistics operation.

The affected location has been temporarily taken offline, which means Dutch residents who have recently purchased products online can expect some orders to be cancelled or delayed. Other warehouses are still operational, so not all orders will be impacted.