Reports today [19th September] indicate that the hardware chain Total Tools has been hit by a data leak that may have compromised data from a reported 38,000 customers. The information leaked is reported to include their credit card numbers, email addresses and log-in details.
Total Tools is owned by Metcash. It lists 122 stores on its website and describes itself as the largest trade tool supplier in Australia. The company became aware of “unusual and suspicious activity” within its IT systems and worked on the leak for a number of days. A third-party forensic cyber specialist has also investigated the breach.
The company’s CEO Richard Murray made a statement to alert impacted customers to the leak and to advise them to take steps to lower the risk of their information “being potentially misused”.
Investigations into the nature and the size of the breach are still ongoing at the time of writing and Total Tools has informed the Australian Cyber Security Centre and the Office of the Australian Information Commissioner.