Intermarché cyberattack affects nearly 300,000 customers

A cyberattack against French supermarket Intermarché has impacted nearly 300,000 customers, the chain’s operating group has confirmed. 

The breach came after someone gained unauthorised access to the supermarket’s click and collect history (known as Drive Intermarché). 

Data taken includes “full names, phone numbers, postal addresses, dates of birth, and loyalty card numbers, as well as certain information regarding… online orders,” of 300,000 customers who use the service, the Groupement Mousquetaires that runs the chain confirmed to AFP. 

However, “no banking details, information on loyalty point balances, passwords, or email addresses were affected by this incident.” 

Customers who had their data compromised have been contacted by the supermarket, with around 287,000 people being informed so far.

Around two million Intermarché customers use the click and collect service, and it is possible that further investigation into the incident will reveal that the data of more customers were taken. 

If this is the case, they will be contacted in the coming days.

The incident was reported to France’s national data protection authority (Commission nationale de l'informatique et des libertés, CNIL) as required.

It is the latest in a series of major cyberattacks across France this year, attacking both public and private institutions.

Fellow supermarket Auchan fell victim to a similar attack in 2024.

Stay vigilant to phishing scams

The breach has renewed calls for general cybersafety and vigilance against scams, particularly for Intermarché customers.

The supermarket notes that victims of the breach may be targeted by phishing scams in the coming days – using the information already taken to give scammers a sense of authority and legitimacy. 

This could come through fraudsters posing as staff from the supermarket itself, offering special deals or using data from purchase history to send order confirmation requests through fraudulent links via emails, or asking for personal information over the phone.

You should never click on a link that you are unsure about, and Intermarché customers should use the app or call the supermarket’s customer service (08 05 10 11 15) to verify anything that seems suspicious.

In general, never give your bank details or other sensitive information out over the phone, even if someone is claiming to call from your bank. 

More tips on keeping safe in light of France’s cybersecurity attacks can be found in our article here.