Add Category
Nearly 200,000 Pizza Hut Australia customers have had their data leaked, following a cyber attack earlier this month.
Key points:
- Pizza Hut says there is no evidence of any misuse of its customers personal information
- 193,000 customers were impacted by the hack
- The fast food place says it reported the cyber hack to the Australian Cyber Security Centre
On Wednesday, a spokesperson for Pizza Hut Australia told ABC it became aware of the cyber incident in early September, where an unauthorised third party accessed some of the company's data.
According to DataBreaches.net, hacking group ShinyHunters are allegedly the group behind the hack.
The spokesperson said the data is limited to the Australian market and does not impact Pizza Hut's operations in any other country.
"We took immediate action to protect our customers and our systems by engaging cyber security specialists to help us understand what occurred, assess the impact, and take steps to secure the data," the spokesperson said.
"At this stage, we have confirmed that the data impacted relates to customer record details held on our customer database which includes information such as a customer's name, delivery address and instructions, email address and contact number."
The spokesperson also noted that "no usable customer credit card data has been compromised as Pizza Hut Australia never collects unmasked credit card data".
Pizza Hut Australia said there was no evidence of any misuse of its customers personal information.
"It is also worth noting that Pizza Hut Australia does not collect any government identity documents or sensitive information and secures all account user passwords with strong one-way encryption," the spokesperson said.
Affected customers
In the statement, Pizza Hut Australia confirmed only a "small proportion" of its customers were affected by the hack.
"From our investigation and the steps taken in response to the incident, we believe there is only a small proportion of customers on our database [193,000] whose personal information has been impacted".
Several people took to social media to show an email from Pizza Hut Australia, informing them of the hack.
The spokesperson said the fast food franchise has contacted the affected customers and have advised them of the hack.
They also said Pizza Hut Australia provided them with steps they could take to protect their information and avoid potential scams.
"Out of an abundance of caution, we have contacted the other current customers in our database to inform them of the incident and provide steps they can take to protect their personal information," the spokesperson said.
The fast food franchise isn't the only place to be hacked this month.
On September 6, book retailer Dymocks said an "unauthorised party" may have accessed its customer records.
Pizza Hut Australia said it has reported the cyber hack to the Australian Cyber Security Centre (ACSC) and it has notified the Office of the Australian Information Commissioner (OAIC).
It added that its daily operations were not impacted.
"Our investigation will continue, and we will update our customers if any additional relevant information becomes available."