The online grocery store Rohlík.cz announced on 11 October 2026 that some of its users' data had been stolen. According to the company, cyber attackers breached a customer support tool.[1][2]
Extent of the leak
According to company representative Ondřej Obergruber, the leak concerned names, e-mail addresses and the content of communication sent to customer support, that is, e-mails, chats and calls with operators and with the virtual assistant. For some customers it also involved a phone number, a call transcript or files uploaded to the chat. According to the company, the login and payment systems were not affected and the app works without restrictions.[1][2]
The company's response
By its own account, Rohlík prevented a larger theft of data, fixed the flaw and reported the case to the National Cyber and Information Security Agency and the Office for Personal Data Protection. It informs affected customers by e-mail; those who themselves included a password or payment card details in the communication were contacted directly. Erwin Brunner said on behalf of the company's management that it had taken the necessary security measures. Rohlík reminds customers that it never asks them for a password or payment card details.[1][2]
Chronology
- — The online grocer Rohlík.cz announced that part of its users' data was stolen and passed the case to the authorities. ČTK / České noviny Blesk.cz
Sources
- ČTK / České noviny — 11 October 2026
- Blesk.cz — 11 October 2026