Worten confirms unauthorized access to customer and service provider data

Portuguese electronics retail chain Worten has confirmed a "criminal act of unauthorized access" to data of some of its customers and service providers, according to a statement sent to the Lusa news agency on November 11 and reported by Portuguese media such as Diário de Coimbra.

According to the company, the investigation and forensic analysis, which are still under way, indicate that no information was altered or deleted, that no credit or financial data or access credentials were accessed and that the normal operation of its systems was not affected. Worten says it has fixed the exploited vulnerability and tightened access controls.

The company says it is working with Portugal's National Cybersecurity Centre, the National Data Protection Commission and the Polícia Judiciária, that it has informed affected customers directly and that it is notifying service providers.

Worten has not said how many people are affected, which categories of personal data were compromised or when the access took place, according to Notícias LX. Nor has it specified whether the incident affects customers of its stores in Spain.

Developing story: the information comes from a single statement distributed by Lusa; the Worten statement still needs to be opened at a source of its own, along with the scope of the access and whether it includes customers in Spain.