REXT: ransomware attack on the headquarters and store network

Encryption on August 9 stopped POS and accounting systems and disrupted some stores; disclosure followed August 10. The October 9 report confirmed publication of 310 files. Separately, 1,044,906 member, booking, buyback and related records were potentially exposed, without confirmed theft or publication of that customer dataset. Card data was excluded. Remediation and malware removal were completed and all stores reopened.