Shares in New Zealand-based outdoor clothing and equipment retailer Kathmandu fell more than 2% yesterday after revealed it was “urgently investigating” a suspected customer data breach of its trading websites.
The company told the NZX and ASX in a statement that an unidentified third party gained unauthorised access to its website platform between January 8 and February 12.
The intruder might have captured customer personal information and payment details, the company said.
“As soon as Kathmandu became aware of this incident, it took immediate steps and confirmed that the Kathmandu online store is and remains secure.,” the company said in the statement.
“The wider IT environment including all Kathmandu physical stores were not impacted by this incident. Since this time, Kathmandu has been working closely with leading external IT and Cyber Security consultants to fully investigate the circumstances of the incident and confirm which customers may have been impacted.
“Kathmandu is notifying potentially affected customers directly. Kathmandu advises any customer who believes they may have been impacted to contact their banks or credit card providers and follow their recommended advice.
“Kathmandu is in the process of notifying the relevant privacy and law enforcement agencies.
Xavier Simonet, Chief Executive Officer said in the statement“Whilst the independent forensic investigation is ongoing, we are notifying customers and relevant authorities as soon as practicable. As a company, Kathmandu takes the privacy of customer data extremely seriously and we unreservedly apologise to any customers who may have been impacted.”
