Security Notice
Customer Security Notice: Incident Affecting Checkout (12–20 October 2026)
Published: 21 October 2026
Status: Resolved. The website is fully secured.
We are writing to notify our customers of an unauthorised security incident that temporarily affected our website.
What Happened?
Between 12 October 2026 and 20 October 2026, our checkout page was subjected to an unauthorised external cyber-attack. During this period, a fraudulent pop-up window was maliciously inserted into the checkout process, prompting visitors to verify payment card details.
The malicious code was identified and completely eradicated on 20 October 2026. Our checkout is now entirely safe to use.
Who Is Affected?
This advisory applies to anyone who visited or attempted to check out on germandeli.co.uk between 12 October 2026 and 20 October 2026 and entered payment details into a pop-up window.
(Note: Standard payments processed outside of that fraudulent pop-up modal, including PayPal and Apple Pay, were unaffected.)
What Information Was Intercepted?
The unauthorised pop-up was designed to capture:
- Payment card number (PAN)
- Expiration date
- CVV security code (3 digits on the back)
What You Must Do Immediately
If you entered card details into an unexpected pop-up on our website between 12 and 20 October 2026, we strongly urge you to take immediate preventative action:
- Contact your card issuer or bank immediately: Call the number on the back of your card. Inform them that your card details may have been compromised in an online data breach and request a cancellation and replacement card.
- Review recent bank statements: Check your accounts for any suspicious or unrecognised charges dating from 12 October 2026 onwards.
- Stay alert for phishing: Be cautious of suspicious phone calls, text messages, or emails claiming to be from your bank or German Deli asking for security codes, PINs, or passwords.
Actions Taken by German Deli
We have taken immediate steps to safeguard our platform:
- The malicious script was identified and deleted immediately upon discovery.
- The underlying vulnerability has been patched and system credentials rotated.
- We have formally reported this incident to the Information Commissioner's Office (ICO) in accordance with UK GDPR.
- We have alerted our merchant payment processor so card networks (Visa and Mastercard) can implement fraud monitoring.
Contact Us
If you have any questions, require confirmation regarding a recent order, or need assistance, please contact our team directly:
- Email: info@germandeli.co.uk
- Phone: 020 8985 8000