The Good Guys told 1.85 million loyalty members of a supplier breach

The Good Guys, an Australian consumer electronics and appliance chain owned by JB Hi-Fi, began contacting 1.85 million current and former members of its Concierge loyalty program in late February 2023 about a data breach at a former supplier.

The data sat with My Rewards International, previously known as Pegasus Group Australia, which used to run the rewards side of the Concierge program. My Rewards said an unauthorised user improperly accessed its IT systems in August 2021 and that the information may since have been made publicly available.

The affected records held contact details: names, addresses, phone numbers and email addresses. Members who had registered My Rewards accounts may also have had dates of birth and encrypted account passwords involved. Both companies said no identity documents or financial data such as driver's licence, passport or credit card details were exposed.

The Good Guys said its own IT systems were not part of the incident and that customer information held by the retailer was unaffected. It added that it no longer used My Rewards, that the accounts linked to Concierge benefits had been closed and that the supplier no longer held Concierge member data. The retailer said it would write to affected members with details of what had been exposed in each individual case.