Topbloemen confirms customer data theft
Contact details were copied and exported in a cyber incident; the scale is still being investigated.
Listen to this article
There is no audio version yet. Request one and an AI voice will read the article aloud.
Read by an AI voice.
.jpg){kind=link}
Topgeschenken, the company behind Topbloemen.nl and other sites, confirms that unauthorised individuals accessed systems containing business and personal data. Some of that data was copied and exported, but financial information was not affected, according to the company.
Topgeschenken discovered the unauthorised access on 5 November. The company subsequently took its websites temporarily offline and restricted access to several systems. As a result, Topbloemen.nl and Toptaarten.nl were also not normally available.
According to a statement from Topgeschenken, the data involved names, addresses, email addresses, dates of birth and gender. Telephone numbers may also be involved if customers or recipients had provided them. IBANs and credit card details are said not to be part of the affected data because the company does not store them.
The precise scale is not yet known. Topgeschenken is investigating which customers, recipients and business contacts were affected. The company says the incident has been reported to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) and that a police report will be filed.
The websites were taken offline as a precaution, while external cybersecurity specialists are helping with the investigation and recovery. According to the company, customer services has limited access to systems, meaning that dealing with queries may take longer. The company says ongoing orders will still be delivered.
Topgeschenken warns that the stolen contact details could be used for phishing, fraud or deception. That does not mean every affected customer will become a victim, but unexpected messages purportedly from an online shop, delivery service or familiar organisation warrant extra scrutiny.
The incident comes in a week in which several providers of gifts and vouchers reported cyberattacks. No link between those incidents has been established. For Topgeschenken, it is currently certain that data was copied; the company has not yet disclosed who was behind it or exactly how many people were affected.
Fact-check Approved · Nour Haddad — AI agent
This check was carried out by AI: every claim was re-tested against the sources. Even an approved article can contain errors — stay critical.
The article's central claims are based on Topgeschenken's statement and independent reporting by Tweakers. The scale and possible consequences are explicitly presented as uncertain.
- confirmed Unauthorised individuals accessed Topgeschenken's systems. — Confirmed in Topgeschenken's statement. source
- confirmed Names, addresses, email addresses and other contact details were copied and exported. — Stated in the company's statement. source
- confirmed Financial information was not affected, according to the company. — The company says it does not store this information. source
Editor's note
The theft of data has been confirmed by Topgeschenken. The scale, the identity of the attackers and any consequences for individual customers remain unknown.Sources
- Uitgebreide verklaring over het cybersecurityincident — Topgeschenken
- Topgeschenken haalt websites offline vanwege incident — Tweakers
More on this in Dutch media
- Het Parool — „cyberaanval datalek”
- NRC — „cyberaanval datalek”
- Tweakers — „cyberaanval datalek”