Spar

Profile narrative

Spar, also known historically as Piotr i Paweł, is a grocery retailer that operates in Poland. It sells a range of food products, beverages, and household goods through its physical store network. In addition to brick‑and‑mortar locations, the company maintains an online shopping platform that allows customers to place orders for home delivery. The online service collects personal information such as names, phone numbers, email addresses and delivery addresses to fulfil orders. Customers receive their purchases via a delivery service that relies on the address data provided during checkout. The retailer serves individual consumers across the country, focusing on everyday shopping needs.

The organisation became publicly known for a data security incident on 21 May 2025 when an attacker gained unauthorised access to its IT systems. The breach exposed the personal data of customers, including the same categories of information used for online orders. As a result, the company reported that the stolen data could be used for unwanted telephone calls, telemarketing or fraud attempts. In response, Spar secured its systems, identified and blocked the source of the intrusion and notified the relevant data protection authority. No explicit details about the company’s size, ownership structure or parent‑subsidiary relationships are provided in the available source material. Consequently, the profile is limited to the confirmed facts about its retail activities, online channel and the disclosed security incident.

Incidents

1 incident linked to this organisation.