Tesco customers' passwords and email details leaked online

More than 2,000 of the supermarket giant's customers affected by online data leak.

Tesco store

Supermarket giant Tesco has deactivated more than 2,000 of its customers' online accounts after their personal details were published on text sharing site Pastebin.

The leaked details included the email addresses, plain text passwords and Tesco Clubcard point balances of 2,239 of the company's customers.

According to a report by the BBC, the data may have been pieced together by hackers using information lifted from other sites and cyber attacks.

It is thought the gleaned email addresses and passwords were then systematically used by hackers to try and access Tesco.com accounts.

In a small number of cases, the hackers are said to have stolen Clubcard points from customers too, which Tesco has agreed to reimburse.

In a statement on the Tesco Facebook page, the company said it was investigating the breach.

"We take the security of our customers' data extremely seriously and are urgently investigating these claims," a company spokesperson wrote.

"We are committed to ensuring that nobody misses out as a result of this. We will issue replacement vouchers to the very small number who are affected."

Trey Ford, global security strategist at security vendor Rapid 7, said the case highlights the perils of using the same login details across multiple online accounts.

"So far the information available indicates the impact of this has been relatively limited stolen vouchers but if attackers have tried this on Tesco.com, the chances are they are also trying it on other sites too and so we may see additional fallout," said Ford.

"This is [a lesson] in consumer behaviour people continue to reuse passwords and other credentials across multiple sites, making it easy for attackers to compromise them. It's essential to learn the lesson from this incident before the cost becomes greater," he added.

Featured Resources

Unlocking collaboration: Making software work better together

How to improve collaboration and agility with the right tech

Download now

Four steps to field service excellence

How to thrive in the experience economy

Download now

Six things a developer should know about Postgres

Why enterprises are choosing PostgreSQL

Download now

The path to CX excellence for B2B services

The four stages to thrive in the experience economy

Download now

Recommended

Cloud storage: How secure are Dropbox, OneDrive, Google Drive, and iCloud?
cloud security

Cloud storage: How secure are Dropbox, OneDrive, Google Drive, and iCloud?

13 Apr 2021
5G will accelerate cyber crime, predicts former White House CIO
5G

5G will accelerate cyber crime, predicts former White House CIO

13 Apr 2021
Hackers leak data from dark web marketplace
cyber security

Hackers leak data from dark web marketplace

9 Apr 2021
How to encrypt files and folders in Windows 10
encryption

How to encrypt files and folders in Windows 10

9 Apr 2021

Most Popular

Microsoft is submerging servers in boiling liquid to prevent Teams outages
data centres

Microsoft is submerging servers in boiling liquid to prevent Teams outages

7 Apr 2021
Hackers are using fake messages to break into WhatsApp accounts
instant messaging (IM)

Hackers are using fake messages to break into WhatsApp accounts

8 Apr 2021
How to find RAM speed, size and type
Laptops

How to find RAM speed, size and type

8 Apr 2021