Domino's blames data breach on former supplier's systems
Domino’s Australia has blamed a system “issue” of a former supplier for a leak of customer personal information to spam email lists.
The pizza seller has called in the Australian information commissioner to investigate the breach but insists its systems haven’t been compromised. Instead, it blames a “former supplier’s systems” for leaking customer email addresses, names and store suburb.
“Domino’s acted quickly to contain the information when it became aware of the issue and has commenced a detailed review process,” an undated statement posted on the company’s website reads.
The company did not say when it first became aware of the issue and insists no financial information has been accessed.
Customers complained on social media about the “eerie” personalised emails and the lack of communication from Domino’s Australia.
“It was a bit eery [sic] getting all these spam emails that somehow knew my name and suburb
and initially were making it past the
spam filter,” Mitchell Dale posted on
Domino’s Facebook page.
“The decision to try to keep me in the dark and not announce what had happened is why I will not be ordering Dominos again.”
“Nothing better than waking up finding out your data has been breached,” Dylan James posted on Facebook. “Why haven’t you informed anyone yet?”
“I won’t be ordering from you again, not because of the breach but because of how you chose to handle it,” Lara Douglas posted.
Mandatory data breach notification laws will come into effect in February 2018, meaning organisations like Domino’s will have to notify customers of any data breaches.
The assistant minister for cybersecurity, Dan Tehan, advised people to watch for suspicious messages, links and attachments. “You should always be suspicious of unsolicited emails requesting personal or financial information,” he said.
Domino’s Australia says it ceased working with the former supplier in July.