CEVA Logistics Breach Exposes Bol and De Bijenkorf Customer Data

Dutch retailer Bol warned customers that some personal information may have been viewed or copied after unauthorized parties accessed systems at CEVA Logistics, a logistics partner that processes and delivers orders from one of Bol’s distribution centers. Bol said its own environment was not compromised, but customer data linked to the partner’s operations was affected, and reports indicated the stolen information was being offered for sale on the dark web.

The disclosure followed a similar warning from De Bijenkorf, which also linked its incident to a logistics partner and said the breach likely affected customer data. Reporting suggested the two cases are related, pointing to a broader third-party supply-chain compromise centered on CEVA Logistics, with De Bijenkorf also experiencing order-processing delays as the incident disrupted operations.