Edelweiss: card data at risk at its Wittamer and Antenor online shops (45,355 and 7,018 records)

Edelweiss, a maker of cakes and bread, announced on 28 August 2024 that its "Wittamer online shop" (a Belgian confectionery brand) and "Antenor online shop" had been accessed without authorization and that card data may have leaked. An outside organization flagged a possible card data leak on 21 May, and both sites and card payments were stopped on 25 May. A third-party investigation completed on 22 July found that the payment application had been tampered with through unauthorized access exploiting a weakness in the system. At Wittamer, card holder names, numbers, expiry dates, security codes, email addresses, passwords and birth dates of 45,355 customers who paid by card between 27 April 2020 and 21 May 2024 are affected; according to ScanNetSecurity, card data of 7,018 Antenor customers from 17 June 2021 to 19 May 2024 is affected. Some cards may have been misused.