Kiddicare Customer Data Breach

The details of almost 800,000 customers of UK baby and child retailer Kiddicare have been stolen from a version of their website it had been using for testing.

Customers reported receiving suspicious messages that had not been sent by Kiddicare, and following an investigation, the data breach was linked back to a test website they had used which led to customer data being compromised.

The company has reported itself to the ICO (Information Commissioner’s Office) in light of what has happened.

The breach stemmed from the company using real customer data as part of a test website environment, and as things can easily go wrong when things are being tested, the data was exposed when the test site was breached. The result of the breach is that customers have been contacted via messaging from people purporting to be from the Kiddicare company, leaving affected customers open to fraud.

Kiddicare reportedly took a while to publicise the breach, but have since contacted the affected customers to apologise for the blunder, and have stressed that no payment information or financial data has been leaked.

According to sources from the BBC the company has made the following statement:

“We are very sorry for the potential stress and anxiety this incident may have caused our customers. We want to reassure everyone that the problem has been fixed, increased security measures have been implemented and we have a dedicated team to (SIC) here to help with any further concerns.”

In a word from our Data Leak Team on the news of the Kiddicare breach…

“Real customer data should never have been used for testing purposes. Testing generally leads to things going wrong, and we’re surprised that they put their customer’s data at risk by using real data in the first place.

This is yet another example of a simple error resulting in such a huge data breach affecting hundreds of thousands of people. The duties organisations have as data controllers are clear, and anyone handling personal data should always be conscious of security; it should always be at the forefront of people’s minds.

We live in an age where such small pieces of information can lead to serious cases of fraud, and the customers affected have undoubtedly been put at risk as a result of this leak.”

Have you been affected?

If you have been affected by the breach then you may be able to claim compensation – particularly if you have been the victim of fraud or a scam. We help people whose data has been breached or leaked and have subsequently become the victims of criminal activity.

You can contact us for help and advice on 0800 634 75 75.

Start Your Claim

You can call our claims team free from a landline or mobile on 0800 634 7575 or click on the link below to create a call back with one of our expert Data Claims team.

Create A Call Back

Information on how we handle your data is available in our Privacy Policy.

The content of this post/page was considered accurate at the time of the original posting and/or at the time of any posted revision. The content of this page may, therefore, be out of date. The information contained within this page does not constitute legal advice. Any reliance you place on the information contained within this page is done so at your own risk.