BOOKSTORE chain Dymocks says 1.24 million customer contact records have been stolen and made available on the dark web.
In an email to customers Dymocks said the information released on the dark web did not include passwords, identification such as driver’s licences or any other highly sensitive information such as transaction information, payment information or credit card details.
Managing director Mark Newman said the information in the contact records was limited to information such as name, address, phone, email, membership details and date of birth.
“To date our investigations have established that Dymocks controlled systems were not compromised,’’ he said.
“Dymocks security measures for its internal systems appear to have been effective in protecting our customer’s information.
“While our investigation is ongoing, the compromise appears to have occurred in the systems of an external data partner.”
He said their efforts were now focussed on understanding how this occurred despite the security measures of that partner.
But he urged customers to continue to be vigilant.
“As an Australian owned family company that has a successful legacy of serving Australian customers for 144 years I cannot begin to express how devastated the team and I feel about this incident.
“We apologise unreservedly that the compromise has occurred and we’re committed to looking for ways to further strengthen the measures that we and our partners take to keep your information safe.
“As I said, we’re continuing our investigation.
“We’re likely to contact you one more time once the investigation is complete to let you know our final findings.’’
He said they would continue to update their customer notices page on their website and notify any updates through their social media accounts.
Or if customers have more questions or concerns they can direct them to the customer support team on 1800 849 096 or help@dymocks.com.au
