The investigation conducted by the logistics partner indicates that unauthorized parties may have gained access to the personal data of a group of ING customers. This data is processed by the partner to fulfill orders for physical products purchased with ING Points. The potentially affected information includes names, addresses, phone numbers, email addresses, and details about ordered products.
It is important to note that this incident does not involve ING systems, customer bank accounts, payment information, savings balances, financial data, or login credentials. None of these data types are part of this incident.
"}},{"componentType":"sectionTitle","title":"Which customers may be affected?"},{"componentType":"paragraph","richBody":{"value":"The incident may affect a group of customers who ordered a physical product through ING Points that was delivered to their home, such as a suitcase, barbecue, or other item.
Customers who only ordered digital products, such as vouchers, gift cards, discount codes, or e-tickets, are not affected by this incident.
"}},{"componentType":"sectionTitle","title":"What actions have the partner and ING taken?"},{"alignedImage":{"position":"right"},"componentType":"paragraph","richBody":{"value":"Upon discovering the incident, the logistics partner immediately took measures to stop the unauthorized access. Cybersecurity specialists were also engaged to investigate the cause and scope of the incident.
As a precautionary measure, ING immediately suspended the exchange of data with this partner. Data sharing will only resume once it has been confirmed that it can be done safely.
ING remains in close contact with the partner and is actively monitoring the progress of the investigation.
"}},{"componentType":"sectionTitle","title":"Why are we communicating about this?"},{"componentType":"paragraph","richBody":{"value":"Although the investigation is still ongoing, we believe it is important to be transparent about what we know and the potential impact on ING customers who have placed orders through ING Points.
Because the personal data of a group of ING customers may have been affected, ING has reported the incident to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
"}},{"componentType":"sectionTitle","title":"What can customers do?"},{"componentType":"paragraph","richBody":{"value":"At this time, there are no indications that customers need to take any immediate action. However, we advise customers to remain vigilant for suspicious emails, text messages, WhatsApp messages, or phone calls requesting personal information, security codes, or login credentials.
In addition, we recommend that customers:
As soon as more information becomes available, we will keep customers informed. If customers have any questions or concerns, they are encouraged to contact our customer service team.
"}},{"accordionList":[{"richBody":{"value":"ING has been informed about a cyber incident involving a logistics partner responsible for the storage and delivery of some physical products available through the ING Shop. Investigations indicate that unauthorized parties may have gained access to certain customer personal data.
"},"title":"What happened?"},{"richBody":{"value":"No. This incident is not related to ING’s systems.
"},"title":"Have ING’s systems been affected?"},{"richBody":{"value":"
The potentially affected data includes names, addresses, phone numbers, email addresses, and information related to orders of physical products through ING Points.
"},"title":"What data may be involved?"},{"richBody":{"value":"This may concern customers who ordered a physical product through ING Points for home delivery, such as a suitcase, barbecue, or another item.
"},"title":"Which customers may have been affected?"},{"richBody":{"value":"No. Bank accounts, payment details, savings, financial information, and customer login credentials are not part of this incident.
"},"title":"Have my bank account, savings, or payment details been affected?"},{"richBody":{"value":"No. Customers who only ordered digital vouchers, gift cards, discount codes, or e-tickets are not affected by this incident.
The logistics partner immediately took measures to stop the unauthorized access. Cybersecurity specialists were also engaged to investigate the cause and scope of the incident.
"},"title":"Are customers who ordered digital vouchers or gift cards also affected?"},{"richBody":{"value":"As a precaution, ING immediately suspended the exchange of data with this partner. Data sharing will only resume once it has been confirmed that it can be done safely. ING is also in close contact with the partner and is actively monitoring the investigation.
"},"title":"What has ING done?"},{"richBody":{"value":"Although the investigation is still ongoing, ING believes it is important to be open and transparent about what is known and the potential impact on customers.
"},"title":"Why is ING communicating about this?"},{"richBody":{"value":"Yes. Because the personal data of a group of ING customers may have been affected, ING has submitted a notification to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
"},"title":"Has this been reported to the Dutch Data Protection Authority?"},{"richBody":{"value":"At this time, there are no indications that customers need to take any immediate action
"},"title":"Do I need to take any action right now?"},{"richBody":{"value":"We advise customers to remain vigilant for suspicious emails, text messages, WhatsApp messages, or phone calls requesting personal information, security codes, or login credentials.
"},"title":"What should I remain alert to?"},{"richBody":{"value":"We recommend that customers:
The investigation into the exact scope of the incident is still ongoing. As soon as more information becomes available, we will inform affected customers.
"},"title":"How do I know if my data has been affected?"},{"richBody":{"value":"Customers who have questions or concerns can contact ING Customer Service.
"},"title":"Where can I go with questions?"},{"richBody":{"value":"Yes. As soon as more information becomes available about the incident and its potential impact, customers who fall within the scope of this incident will be informed.
"},"title":"Will customers receive further updates?"}],"componentType":"accordion"},{"componentType":"accordion"}]},"hasMacro":false,"id":"035b2bf5-26ab-46de-9ee9-63eed312c0db","localeString":"en-GB","mainHeaderZone":{"backLink":{"textLink":{"text":"ING Points especially for you","url":"/en/personal/ing-punten"}},"componentType":"productHeader","coreHeader":{"body":"ING has been informed of a cyber incident involving a logistics partner responsible for storing and delivering some of the physical products available through the ING Shop.","subtitle":"No Impact on ING Systems, Bank Accounts, or Customers' Financial Data","title":"Cyber Incident at ING Points Logistics Partner"}},"publishDate":"2026-08-06T11:40:02.777+02:00"}}