German Doner Kebab – 162,373 Customer Records Exposed in Data Breach
What Happened — In March 2025 data attributed to German Doner Kebab was posted on a public hacking forum. The dump contained 162,373 unique records, each with an email address, name, phone number, and physical address. The company subsequently issued a disclosure notice to the affected individuals.
Why It Matters for Trust & Control Assurance
- This incident illustrates the exact scenario a continuous control‑assurance program seeks to prevent: inadequate access controls that allow bulk personal data to be extracted and published.
- Demonstrable evidence of robust identity‑access policies, regular privilege reviews, and audit‑ready logs provides a defensible trail for regulators and auditors.
- Mapping the breach to a single control objective—Identity and Access Management—covers requirements across SOC 2, ISO 27001, NIST CSF 2.0 and others, delivering a multi‑framework trust signal.
Who Is Affected – Retail & restaurant operators; any organization that stores customer contact information.
Recommended Actions
- Conduct an immediate review of user access rights to customer databases; enforce least‑privilege principles.
- Verify that logging and monitoring are capturing all privileged‑access events and retain logs for at least 90 days.
- Update incident‑response playbooks to include rapid notification and containment steps for data‑exfiltration events.
Source: Have I Been Pwned – German Doner Kebab breach
Technical Notes
- Attack vector: Unknown – data appeared on a hacking forum, suggesting a prior compromise of internal systems or third‑party services.
- Data types exposed: Email addresses, full names, telephone numbers, physical mailing addresses.
Source: Same as above