🔒breach.co.nz · the NZ & Australia breach register 🛡️ A Govern service
Register › 🇦🇺 AU › Retail
Retail sector · leaderboard
Own the Retail leaderboard
The top banner across the Retail overview and every Retail record — one advertiser, exclusively.
Own this leaderboard → breach@govern.co.nz

Woolworths MyDeal

🇦🇺 Melbourne, VIC · MyDeal (Woolworths Group) · Record AU-2022-0231
○ Reported — awaiting official confirmation
Reported — awaiting official confirmation. The facts below are drawn from the organisation's own disclosure and credible reporting. Figures are as reported; unknowns are labelled, not estimated by us.
People affected
2,200,000 (approx)
Breach date
2022-10
Regulator
OAIC
Trust tier
B · Reported

Data exposed

Names, email addresses, phone numbers, delivery addresses (subset: dates of birth) Media-reported

Confidence: Confirmed = regulator/court · Company-confirmed = the organisation's own disclosure · Media-reported = press. Figures without an official source are labelled, not estimated.

What happened

In October 2022 Woolworths disclosed that its MyDeal marketplace had suffered a breach affecting around 2.2 million customers, exposing contact details and, for a subset, dates of birth [insideretail-md]. The breach came days after the major Optus and Medibank incidents.

Timeline

  • 2022-10 — Woolworths disclosed the MyDeal breach; ~2.2M customers affected [insideretail-md].

Current status

Disclosed and remediated; customers notified. Figures are as reported. [insideretail-md]

Why it matters

Part of the late-2022 wave of Australian breaches that pushed privacy reform up the agenda.

GGOVERN Tabletop Exercises · Govern house Strengthen your cyber resilience — rehearse the decisions that matter. Book a Discovery Call →