Online retailer Bol and department store chain De Bijenkorf have emailed customers to warn that their personal details may have been exposed in a cyberattack on a logistics company both firms use. Bol said its own systems were not affected and that the incident involves orders from a single distribution centre. Neither company has said how many customers may be affected, and De Bijenkorf has commissioned an external investigation into the breach. CEVA told Bol about the possible breach on August 1 and the Dutch data protection authority AP was informed on August 3, but customers were only emailed on Wednesday. A Bol spokesperson told NOS the company wanted to establish first what had happened and who was affected, rather than contacting people repeatedly.