{"reference":"BREACH-2025-003","notification_date":"2025-02-21","controller":{"name":"Acme Supplies SRL","address":"Rue de la Loi 100, 1040 Brussels, Belgium","contact_email":"privacy@acme-supplies.eu","dpo_name":"Marie Laurent","dpo_email":"dpo@acme-supplies.eu"},"data_subject":{"name":"Sophie Martens","email":"sophie.martens@example.com","reference":"CUS-2022-0842"},"breach":{"occurred_on":"2025-02-17","discovered_on":"2025-02-18","description":"An unauthorised person used a former contractor's login that should have been disabled, and downloaded a list of support-ticket subjects and the email addresses they came from."},"data_affected":["Your email address","The subject lines of support tickets you opened between 2023-01 and 2025-02"],"consequences":"There is a moderate risk that someone will send you phishing emails that mention our company and pretend to be follow-ups to your support tickets. No passwords, payment details or ticket contents were exposed.","measures_taken":["We disabled the compromised account within 12 minutes of spotting the activity.","We reset session tokens and forced everyone to log in again.","We brought in an outside digital-forensics firm to confirm the scope.","We notified the Belgian supervisory authority (APD/GBA) the same day."],"recommended_actions":["Be suspicious of unsolicited emails that refer to your past support interactions with us, especially those asking you to click links or confirm personal details.","If in doubt about whether a message is genuinely from us, forward it to privacy@acme-supplies.eu before acting on it.","Check that the sender address of any email claiming to be from us ends in '@acme-supplies.eu'."],"authority_notified":{"name":"Autorité de protection des données (APD/GBA)","notified_on":"2025-02-20"},"support_contact":"privacy@acme-supplies.eu","status_page_url":"https://acme-supplies.eu/incident-2025-003","signatory":{"name":"Marie Laurent","title":"Data Protection Officer"}}