Overview
Affected data includes names, contact and delivery/billing details, and order and shipment information. Company and VAT details may apply to business customers. Payment, banking, card, account-authentication and prescription or medical data were not involved. No total is stated.
Timeline
- Occurred
- Discovered
- Disclosed
Initial customer emails about possible exposure.
Provider confirmed access and copying.
Further notices to affected customers.
Organization response
Data sharing stopped on August 1; regulators were notified and customers received a further notice on September 14. No intrusion into Ace & Tate accounts or website was indicated. Logistics resumed after safety checks.
What you can do
Beware of order and parcel phishing; do not share payment details in unsolicited messages and verify orders directly.
Sources
- Security incident at our logistics partnerAce & Tate · 2026-11-09