Security incident at a logistics warehousing partner of bol

On 5 August, we informed you about a security incident at CEVA Logistics, a logistics service provider that bol works with for the processing and delivery of customer orders.

We would like to provide you with an update on the situation, as we realise that this may have a significant impact on your business. Unfortunately, restoring operations at CEVA's Veerweg location is taking longer than anticipated. This means that the previously communicated consequences remain in effect for the time being:

• The assortment stored at the affected location has been taken offline. As a result, these products are currently unavailable for sale through bol.
• At present, we are unable to receive goods from suppliers and sales partners at the affected location.
• Customers who may have been impacted by the security incident have been informed accordingly.
• Our other logistics locations remain fully operational and continue to process orders according to standard procedures.

We understand how disruptive and uncertain this situation is. Together with CEVA, we are working with the highest priority on a safe and secure restoration of services.

Bol is currently exploring options to bring the assortment stored at the Veerweg location back online as quickly as possible. We will proactively inform you as soon as this becomes possible.

While we are not yet able to provide a clear timeline, we believe it is important to keep you regularly informed. As soon as there are any new developments, we will update you immediately via this page and email

The incident involves two systems used for processing orders from one of bol's fulfilment centers. No bol systems were affected. However, data of customers whose orders were processed via this location may have been viewed or copied.

Upon discovering the incident, our logistics warehousing partner immediately took measures to stop unauthorized access and engaged external cybersecurity specialists for further investigation. Bol proactively halted data exchange with our logistics warehousing partner. This will only resume once it has been determined that it can be done safely.

Because personal data of bol customers may be involved in this incident, bol has reported it to the Dutch Data Protection Authority. Customers whose data may have been affected have been directly informed.

In addition, the incident has consequences for part of our logistics operation. The product range of bol and selling partners located at the affected location has been temporarily taken offline, and some orders have been cancelled or may be delayed. Our other logistics locations are operational. Partners and suppliers whose product range is affected have been informed.

We take the protection of personal data and the continuity of our services very seriously. We are working closely with our logistics warehouse partner to minimize the impact on customers, partners, and suppliers.

We'll keep you updated on any developments. For the latest information, please check the page below: