Mr Max: unauthorized access to its app and online store

On the evening of 3 October, discount store chain Mr Max found suspicious access to the servers of its MrMax app and online store, stopped the services and blocked outside access. A third party had abused a function of the software the services run on to get into the server, and member IDs, names, emails and phone numbers of up to 1,735,154 people leaked. Addresses, birth dates, card data, passwords and purchase history did not leak.