CEVA handles deliveries for the companies and had access to the customer data needed to fulfil orders. At ING, the breach affects customers who ordered physical products through the bank’s rewards points scheme. The club and Ace & Tate have both reported the breach to privacy watchdog AP, as Bol did earlier this week. Ace & Tate has warned customers that current orders may be delayed, although online ordering is still running. CEVA said it would respond to the breach at a later stage.