Cyber Incident Victim: Bettys Tea Rooms
Date:
May 2015
Location:
United Kingdom
Summary
A data breach at Bettys Tea Rooms compromised customer information including names, email and postal addresses, encrypted passwords, and telephone numbers due to an industry-wide software vulnerability. The company confirmed no financial details were accessed but advised affected online shoppers globally to change reused passwords and remain vigilant against potential phishing attempts impersonating the brand. The Yorkshire-based tea shop chain emphasized its commitment to customer confidentiality and initiated a full investigation into the incident.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
In May 2015, Yorkshire-based Bettys Tea Rooms disclosed a data breach affecting its online customer database. Hackers exploited an industry-wide software vulnerability to copy personal information, including names, email addresses, postal addresses, encrypted passwords, and telephone numbers of thousands of global customers. The breach impacted Bettys.co.uk, the e-commerce platform supporting the company's worldwide online business selling teas, coffees, and baked goods. Director Paul Cogan confirmed financial data remained secure, with no credit or debit card details compromised. The company proactively notified affected customers via direct communication, citing their presence in the breached database as the reason for contact. Bettys emphasized it treated customer confidentiality "extremely seriously" and initiated a full internal investigation into the incident.
The breach carried significant operational and reputational implications for the 96-year-old institution, which operated six traditional Yorkshire tea rooms alongside its global digital storefront. Bettys warned customers to treat unsolicited communications claiming affiliation with the company "with extreme caution," specifically advising against sharing financial details in response to such contacts. The firm urged password resets for customers who reused credentials across multiple platforms, acknowledging that encrypted passwords were among the stolen data elements. While maintaining that core payment systems remained uncompromised, the incident disrupted customer trust in the heritage brand's digital operations. The company's response focused on transparency regarding the breach scope while reinforcing existing security protocols for financial transactions.