Woolworths MyDeal

🇦🇺 Melbourne, VIC · MyDeal (Woolworths Group) · Record AU-2022-0231

○ Reported — awaiting official confirmation

Reported — awaiting official confirmation. The facts below are drawn from the organisation's own disclosure and credible reporting. Figures are as reported; unknowns are labelled, not estimated by us.

People affected

2,200,000 (approx)

Breach date

2022-10

Regulator

OAIC

Trust tier

B · Reported

Data exposed

Names, email addresses, phone numbers, delivery addresses (subset: dates of birth) Media-reported

Confidence: Confirmed = regulator/court · Company-confirmed = the organisation's own disclosure · Media-reported = press. Figures without an official source are labelled, not estimated.

What happened

In October 2022 Woolworths disclosed that its MyDeal marketplace had suffered a breach affecting around 2.2 million customers, exposing contact details and, for a subset, dates of birth [insideretail-md]. The breach came days after the major Optus and Medibank incidents.

Timeline

2022-10 — Woolworths disclosed the MyDeal breach; ~2.2M customers affected [insideretail-md].

Current status

Disclosed and remediated; customers notified. Figures are as reported. [insideretail-md]

Why it matters

Part of the late-2022 wave of Australian breaches that pushed privacy reform up the agenda.