IntelBroker hackers claim major data theft from Retail giant Lulu Hypermarket

Abu Dhabi-based hypermarket chain Lulu Hypermarket has allegedly experienced a major data security incident that involved hackers stealing a large database containing customers’ personal information.

A hacker group calling itself IntelBroker announced on Breach Forums last week that it compromised Lulu Hypermarket and stole order details and the data of tens of thousands of customers, including their email addresses and phone numbers. The group leaked a portion of the stolen database as proof of its exploit, threatening to leak the entire database on a later date.

“In July 2024, Lulu Hypermarket suffered a data breach that exposed the information of up to 196,000 individuals. Note – I have the full database, including the millions of users and orders that I’m currently importing as a .bacpac file so I can release it at a later date,” the group claimed.

Lulu Hypermarket is owned by Emirati-based multinational conglomerate Lulu Group International. The retail chain is the largest in the Middle East with 259 outlets in the Gulf as well as dozens of hyperscale shopping malls in the Middle East, India, Indonesia and Malaysia.

The hyperscale conglomerate is yet to issue a statement over the alleged breach of customer records.

IntelBroker has in the recent past claimed several high-profile breaches, such as those of General Electric, Facebook Marketplace, Home Depot, Europol Tech in Asia and cybersecurity company Zscaler.