Breach · 4 min read
Landmark Group says some Shukran loyalty members had names and contact details accessed
The UAE retailer told members an unauthorised party reached names, contact details and dates of birth. It says card details, passwords, points and wallets were not affected.
Landmark Group, the Dubai-based retailer behind stores such as Centrepoint, Max, Splash, Home Centre and Viva, has told some members of its Shukran loyalty programme that an unauthorised party reached some of their personal information. The company confirmed the incident to Gulf News and Khaleej Times on November 11, 2026. Here’s what it has said, and what members should watch for.
What Landmark has said
In a statement to Gulf News, Landmark said: “We recently identified an incident involving unauthorised access to some of our systems. We acted immediately to contain it and launched an investigation. The relevant regulatory and law enforcement authorities have been informed.”
The group told Gulf News the information involved included “names, contact details and dates of birth for some customers.” It has not said how many members were affected, when the access happened, how the systems were reached, or whether any information was copied or misused.
On what was not involved, Landmark has been more specific. “As we do not store debit / credit card details on our systems and passwords are securely protected and are not stored in readable form, these have not been affected,” it said. Khaleej Times reports that Shukran points, balances and wallets were also unaffected, and that the app and loyalty services are still running as usual.
How members were told
Gulf News reports that Landmark sent WhatsApp messages to affected customers late Tuesday. Khaleej Times describes an SMS alert. In both accounts, the company said people who received the message should treat their information as among the records involved.
According to Gulf News, the message itself said: “We have identified an incident involving unauthorised access to some of your personal information including your name, contact details, DOB.” It also told members that debit and credit card details and passwords were not affected, and advised them to stay alert to suspicious calls, emails and messages.
Khaleej Times quotes Shukran’s published Q&A as saying, “Protecting your information is our responsibility and one we take extremely seriously.”
What you can do
- If you got a message from Shukran about this, assume your name, contact details and date of birth may have been reached, and watch for follow-up from the company as the investigation continues.
- Be wary of anyone who contacts you about your Shukran account, especially if they ask you to confirm a password, a card number, a one-time code or your points balance. Landmark says those were not exposed in this incident, which is exactly the sort of detail a scammer might still pretend to need.
- Use the official Shukran app or website, opened yourself, if you want to check your account. Don’t use a link in an unexpected message.
- If your Shukran login is a password you reuse elsewhere, change the other copies too, even though Landmark says passwords were not stored in a readable form.
- Learn the patterns. See how scammers use leaked data to make phishing personal.
How Frame helps
Add this breach to a verified email in Frame and Frame shows what it exposed, gives you a short checklist and counts it in your exposure report. Frame can also look up your verified emails in Have I Been Pwned’s breach database. Frame’s email aliases also let you give a loyalty programme its own address, so a fake “your points are at risk” note that arrives at the wrong one stands out. Frame never collects or stores the leaked records themselves.
Related coverage
- Who Gives A Crap says a marketing provider exposed customer names and addresses: another retailer incident limited to contact details, not payment cards.
- How scammers use leaked data to make phishing personal: why a message that already knows your name still may not be genuine.
- Front Systems breach reaches shoppers at Norwegian clothing chains: another retail customer data breach disclosed the same week, this time through a store software supplier.
Sources
- Gulf News, Landmark Group’s UAE Shukran members alerted after unauthorised access to customer information, November 11, 2026
- Khaleej Times, Shukran members’ personal data accessed in data breach, but card details safe, November 11, 2026
- The National, UAE's Landmark Group probes data breach in Shukran loyalty programme, November 11, 2026
More stories
New posts, by email.
About once a month. Plain-language privacy notes, nothing else. I never share your address.