The Australian federal police are investigating who hacked David Jones’ online account, gaining access to customer names, addresses, emails and orders.
The department store doesn’t know when the hack occurred but in a message to customers today, said it became aware of the breach on September 25 and “the vulnerability which was used to access the data has been shut down”.
DJs says no passwords, credit card details or any other financial information were obtained because the company does not store that data on the website.
“There is no indication that the information has been misused in any way,” the company said.
The retailer has emailed the affected customers to inform them of the breach, and the AFP and Privacy Commissioner have also been informed.
Customers do not have to change passwords or take any other action.
The business, now owned by South African retailer Woolworths Holdings, says its customers should be wary of unsolicited phone calls or emails purporting to be from David Jones asking for personal or financial information.
“David Jones would never ask for your personal information via email or telephone on an unsolicited basis,” it said.
News of the hack comes less than 48 hours after the sudden departure of the company’s CEO, Ian Nairn, little over a year into the job.
NOW WATCH: Briefing videos
Business Insider Emails & Alerts
Site highlights each day to your inbox.