Jewson

Jewson is a builders merchant headquartered in the United Kingdom, supplying building materials to trade professionals and DIY customers. The company operates a network of physical branches across the UK, providing local access to stock and expert advice. In addition to its branch network, Jewson maintains an online sales channel that allows users to browse products, check availability, place orders and arrange for delivery or collection. This digital platform is marketed under the name Jewson Direct, reflecting the firm’s focus on offering a convenient purchasing experience for both professional contractors and home improvers. By combining traditional branch service with an e‑commerce option, Jewson serves customers who prefer either in‑branch or online purchasing.

In August 2017 Jewson experienced a cybersecurity breach that affected its e‑commerce website, Jewson Direct. Attackers inserted unauthorized code into the site, which remained undetected for several weeks before being discovered. The intrusion potentially exposed customer names, locations, billing addresses, passwords, email addresses, telephone numbers and payment card details including the CVV number. Although Jewson stated that it did not store card data on its systems, it notified affected individuals of the possible exposure as a precautionary measure. In response, the company temporarily closed the online store, conducted a forensic investigation to determine the scope of the breach and implemented additional security controls. Jewson also offered complimentary identity monitoring services to those whose data might have been compromised and reported the incident to the relevant UK data protection authority. The episode highlighted the importance of robust web application security for retailers operating online sales channels within the builders merchant sector.