Tesco Clubcard holders warned of major security issue - what to do if you're affected
Tesco has issued new cards to 600,000 members of its Clubcard loyalty scheme after discovering some accounts had been compromised.
The supermarket chain said attackers attempted to gain access to Clubcard accounts using a database of credentials stolen from other platforms.
Tesco says all Clubcard members potentially affected by the incident have been informed via email.
Although the hackers were thought to have had some success, no financial information was exposed in the incident and Tesco’s systems have not been attacked, the company added.
Fraudulent activity
Tesco’s loyalty scheme offers members one point for every pound spent, and every 100 points earned is worth £1 in in-store credit.
Although attackers gained access to the credit accrued by some account holders, Tesco said no Clubcard points will be lost and new vouchers will be issued.
Members set to receive new Clubcards as a result of the incident can continue to collect points online and in-store using their existing cards.
“We are aware of some fraudulent activity around the redemption of a small proportion of our customers' Clubcard vouchers,” said a Tesco spokesperson.
“Our internal systems picked this up quickly and we immediately took steps to protect our customers and restrict access to their accounts.”
According to Chris Miller, Regional Director UK&I at RSA Security, incidents of this kind are exacerbated by users’ reliance on identical log-ins for multiple platforms.
“Authentication continues to be a balancing act between security and convenience and organisations must continue to look for convenient yet secure ways to make access as easy as possible for the user,” he told TechRadar Pro.
“From the end-user's perspective, it is really important not to use the same password for multiple accounts...After all, if attackers have tried to log into Tesco Clubcard with stolen credentials, in all likelihood they'll be trying the credentials on other sites too.”
Tesco has advised Clubcard members to get in contact on 0800 591 688 with any additional queries related to the incident.
source techradar
Industry: Cyber Security
Latest Jobs
-
- Cyber Security Professional Services Lead | London | Immediate
- London
- N/A
-
Cyber Security Professional Services Lead London / Hybrid This role leads the delivery function for a cyber security professional services team, with ownership of utilisation, delivery quality, and team performance across multiple client programmes. You will drive billable utilisation, ensure projects are delivered on time and to standard, and manage resource planning across a complex portfolio. Acting as the escalation point for key engagements, you will also lead and develop a high-performing consulting team, maintaining strong client relationships and consistent delivery standards. Key responsibilities: Drive utilisation and delivery performance Ensure quality, on-time delivery across engagements Manage resource planning and capacity Act as escalation point for key programmes Lead and develop the consulting team Background: Currently leading a cyber or technology professional services function Recent track record improving utilisation and delivery outcomes Experience across multi-client, complex programmes Strong senior stakeholder engagement A hands-on leadership role with accountability for delivery, team performance, and commercial outcomes
-
- Cyber Security Sales | Enterprise | New Business | London
- City of London
- Uncapped OTE
-
Enterprise Account Executive | Cyber Security | UK London / UK (hybrid with client engagement) A scaling cyber security firm is hiring an Enterprise Account Executive to drive growth across large UK organisations. This role blends new business with ownership. You will open doors, create demand, and win enterprise accounts, then retain and grow those relationships into long-term, high-value partnerships. Targeting senior stakeholders at CISO, CIO, and board level, you will shape and close complex deals across cyber security, cloud, and transformation programmes. This is a strategic role. Fewer accounts, higher value, longer cycles. You are expected to build pipeline from scratch, with support around you but without reliance on inbound or marketing. A recent and consistent track record of achieving or exceeding sales targets is essential. This role requires someone currently performing at a high level in enterprise sales. UK-based, with remote working and client engagement as needed. Competitive base and uncapped earnings, with scope to build a meaningful enterprise portfolio.
-
- Cyber Security Sales | Financial Services | New Business | London
- England
- Uncapped OTE
-
New Business Lead | Cyber Security | Financial Services | London / UK UK Remote / London client travel A well-backed cyber security and technology firm is looking to hire a senior New Business Lead to drive UK growth, with a particular focus on Financial Services. This is a position for someone who knows how to open doors where others cannot. A role built around identifying opportunity, challenging incumbents, and converting that into long-term client relationships and revenue. You will own new logo acquisition across FS, working closely with leadership to shape go-to-market strategy and position across cyber security, cloud, and modernisation offerings. Full ownership of the sales lifecycle. Pipeline creation, deal strategy, negotiation, and close. The expectation is simple. Build momentum, win key accounts, and scale a function around you as revenue grows. Strong experience selling into Financial Services environments is key. Credibility at CISO, CIO, and board level matters. Remote-first, with London and client engagement as required. Competitive base, uncapped earnings, and genuine scope to build something meaningful. The successful sales person MUST have a recent history and current experinece of achieving / overachieving against sales target.