Debenhams has revealed that up to 26,000 customers of its Flowers website have been hit by a cyber attack on their personal data.
Shoppers’ payment details, names and addresses were put at risk by the hackers, who targeted third-party ecommerce provider Ecomnova, it was reported.
Debenhams said it had contacted customers affected, the BBC reported.
Customers at Debenhams.com, the department store group’s main and separate website, were not thought to have been affected.
The cyber-raid occurred between February 24 and April 11.
Debenhams said: “Our communication to affected customers includes detailing steps that we have taken and steps that those customers should take.
New chief executive Sergio Bucher, who formerly worked for online giant Amazon, said: “As soon as we were informed that there had been a cyber-attack, we suspended the Debenhams Flowers website and commenced a full investigation.
“We are very sorry that customers have been affected by this incident and we are doing everything we can to provide advice to affected customers and reduce their risk.”
The breach of security has been reported to the Information Commissioner’s Office.