Breaches and incidents
Offerz AG: test environment with January 2026 copy of order data accessed, about 115,000 customers
Per AWP/cash.ch and Netzwoche, an intruder accessed an Offerz test environment on the night of 7 Oct 2026, discovered on the morning of 9 Oct.
- Disclosed
- Verification
- Confirmed by two or more outlets
What happened
- Per AWP/cash.ch and Netzwoche, an intruder accessed an Offerz test environment on the night of 7 Oct 2026, discovered on the morning of 9 Oct; it held a January 2026 copy of order data for about 115,000 customers (order numbers, names, addresses, emails, mobile numbers, IP addresses, payment-method information). Offerz says it cannot prove data left (“koennen wir nicht gesichert nachweisen”) but assumes an outflow as a precaution; card/account data and passwords were not in the copy.
- Root cause: the copy was made during technical work and stored in cloud storage reachable from the test environment; Offerz says it “haette nach Abschluss der Arbeiten geloescht werden muessen” and calls this an error. Offerz said the test environment was monitored less comprehensively than production.
- No attacker named.
- Test environment deactivated, access blocked, forced password reset, customers emailed, criminal complaint filed, EDOEB and BACS informed.