Spain’s El Corte Inglés department store chain has fallen victim to unauthorised access to its customers’ personal data. In an email sent this morning to customers, the company said that an external provider had breached its security, allowing them access to identification, card numbers, and contact details. The company assures that third parties will not be able to use the payment cards of its clients as a result of the data breach. Customers can use their cards safely in all of its department stores and online.

The incident was identified and immediately remedied through El Corte Inglés’ detection and security protocols. The supplier was also required to take additional steps to prevent future incidents. The case was brought before the relevant data protection authorities.
Similarly, El Corte Inglés stressed that the information that has been accessed without authorisation consists of identification and contact details, as well as card numbers for purchases only at El Corte Inglés. “In any case, this information does not allow third parties to operate or make payments with your El Corte Inglés card,” the statement clarified, so customers can continue to use their card in complete safety both in stores, on its website and in the application.
El Corte Inglés has reminded customers that it would never contact them to request passwords, security codes or personal information, either via email or phone calls.