November 10, 2026, 9:15 am | Read time: 2 minutes
The hardware retailer Mindfactory has been the target of a cyberattack. The attackers may have gained access to customers’ personal data–including passwords. The company is currently informing affected individuals as well as the relevant data protection authorities. Additionally, a criminal complaint has been filed against unknown persons.
Which Data May Be Affected
According to the online magazine “Heise,” addresses, email addresses, and phone numbers may have been compromised based on current knowledge. Encrypted passwords may also be affected. Mindfactory is informing customers who have ordered from the online shop since its acquisition by the Heise Group in July 2025.
The company reassures that payment data is safe. Bank and credit card information are not stored directly in Mindfactory’s shop system. Processing is done by the respective payment service providers. It is currently unclear whether data from customers who ordered before July 2025 is also affected.
What Mindfactory Customers Should Do Now
Mindfactory has proactively reset the passwords of all customer accounts. Therefore, a new password must be set the next time the account is accessed. It should be as unique as possible and not used simultaneously for other online services.
Also of interest: How E-Waste Became a Lucky Find
According to the company, the security vulnerability exploited in the attack has now been closed. A forensic investigation is set to determine exactly what happened. Affected individuals should be particularly vigilant for possible phishing attempts. Suspicious links or attachments in emails and SMS should not be opened.