Short answer
Notebooksbilliger.de emailed customers on 14 October 2026 to say criminals had attacked its IT systems and that customer data was affected. It has not confirmed that data actually left its systems. The company later put the number of affected customers at a mid five-digit figure and says passwords are not affected.
If you think your details were included, start with our checklist on what to do after a data breach.
Key facts
| Organization | notebooksbilliger.de |
|---|---|
| Incident type | Data breach |
| Status | Confirmed by the organization |
| Sector | Online retail (electronics) |
| Country | Germany |
| Disclosed | 2026-10-14 |
| People or records affected | A mid five-digit number of customers (company statement, 20 October) |
What data was exposed
- Email addresses (confirmed)
- Names and postal addresses (possible)
- IBAN bank account numbers, if used for payment (possible)
What happened
On the evening of 14 October 2026, notebooksbilliger.de, a German online retailer of laptops and consumer electronics, emailed customers about a cyberattack on its IT systems. Borns IT- und Windows-Blog published the notice the next morning, and ComputerBase followed with a report.
The wording matters. Email addresses are confirmed as affected. Names, postal addresses and IBANs may be, but only for customers who gave that information. The company has not said when the attack took place, how the attackers got in or which systems they reached.
What the company says it did
Notebooksbilliger.de says it informed the data protection authority and filed a criminal complaint. By 20 October it said the attack was contained and systems were largely back to normal, with a few sites, including nullprozentshop.de, still restricted.
All customers identified so far were notified by email, according to ComputerBase.
Gaps in the picture
Several commenters under the Born post said they had recently ordered but received nothing. One reported the notice went to an outdated address. Another said the company named an email service provider, Emarsys. None of that is confirmed by the company. If you have ever ordered from the shop, do not wait for a message.
What the exposed data lets scammers do
An email address plus a name is enough for a believable “your order” or “refund” message. An IBAN adds a second risk: a stranger can attempt direct debits. Our guides on phishing messages and online shopping scams explain how to spot these, and what to do after a data breach lists the basic steps.
Practical steps for direct debit payers
If you paid by SEPA direct debit, look at your account history for the past year, not just the last month. A small test debit from an unknown name is a common first move. Ask your bank to block it and, where needed, to issue a new mandate setup. Do the same if a shop you do not recall appears.
What is still unknown
The exact count, the intrusion date and whether data was copied are open; the company has not confirmed an actual data loss. No group has claimed the attack in the sources we read. See our other breach reports for context.
Scams to watch for after this breach
Criminals use breach news as cover. Expect messages that mention the incident, quote real details, or offer help.
- Phishing emails and SMS that pretend to be notebooksbilliger.de, PayPal or your bank and refer to the incident.
- Fake calls from people claiming to be bank staff or the police who mention a suspicious direct debit.
- Unauthorised SEPA direct debits if your IBAN was taken.
- Fake refund or order-cancellation messages that lead to a lookalike login page.
What to do if you are affected
- 01Check your bank statements regularly for several months. SEPA direct debits can generally be returned within eight weeks without giving a reason, and up to 13 months if there was no valid mandate (Deutsche Bundesbank).
- 02Do not click links or open attachments in messages that mention the incident, even if they use your name.
- 03The company says it never asks for passwords, PINs or TANs by email, SMS or phone. Hang up on anyone who does.
- 04Use a unique password for your notebooksbilliger.de account and every other shop. Turn on two-step login where possible.
- 05Report phishing to your Verbraucherzentrale and, if you lost money, file a report with your local police.
Frequently asked questions
Was my password leaked in the notebooksbilliger.de breach?
The company says there are no signs that passwords were compromised. Still, change it if you reuse it elsewhere.
Was my IBAN or card data exposed?
Names, addresses and IBANs may be affected if you paid by direct debit. The company says it does not store full credit card data, though a forum thread disputes this and the claim is unverified.
How many customers were affected?
Notebooksbilliger.de did not give a number at first. In a 20 October update it described a mid five-digit number of customers, according to ComputerBase.
What if I did not get a notification email?
Some readers on Borns IT- und Windows-Blog said they received no email, or that it went to an old address. Those are unverified reports. If you shopped there, assume you could be affected and check your statements.
Was it confirmed that data was actually stolen?
Unauthorised access to customer data is confirmed. According to ComputerBase, the company cannot yet say whether or how much data left its systems and has not confirmed an actual data loss.
Sources
- Notebooksbilliger.de warnt Kunden nach möglichem Datenabfluss (Notebooksbilliger.de warns customers after possible data outflow), ComputerBase, 2026-10-15
- Cybervorfall bei Notebooksbilliger.de; Nutzerdaten abgeflossen (Cyber incident at Notebooksbilliger.de; user data leaked), Borns IT- und Windows-Blog, 2026-10-15
This post summarises public reporting as of 2026-10-30. Details of live incidents change; we update posts when the organization or regulators publish new facts. Spot an error? See our editorial and corrections policy.