Customer data (name, date of birth, email, phone number, customer number) was leaked from an IT service provider for Lidl; payment data and passwords remained untouched.