All Breaches
September 18, 2026 Verified E-Commerce

Flink Delivery Data Breach

Flink, the Berlin-headquartered on-demand grocery delivery service operating across Europe, suffered a significant security incident targeting internal warehouse hub systems.

1 Million
Affected People
4
Data Types
Critical
Severity
Oct 27, 2026
Last updated

Protect Yourself

Check whether you were affected by this breach

Check my email

Exposed Data Types

4
  • Names
  • Email addresses
  • Phone numbers
  • Physical addresses

About This Breach

Threat actors operating under the moniker LPG Group utilized compromised employee credentials to exfiltrate approximately 1 million customer records and 13,000 employee files. When Flink refused a corporate ransom demand of 100 ETH, the attackers pivoted to direct customer extortion, sending threatening emails to over 10,000 users demanding micro-payments in cryptocurrency. Exposed information includes customer names, email addresses, phone numbers, delivery addresses, and doorstep access instructions.

Verification and editorial method

LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.

Report missing or incorrect information