Landmark Group (Shukran loyalty programme) data breach

Landmark Group (Shukran loyalty programme) announced a data breach on Nov 11, 2026, exposing names, phone numbers, email addresses and dates of birth. The number of people affected has not been disclosed. It was caused by a cyberattack. No settlement or compensation has been announced.

What happened

Dubai-based retail conglomerate Landmark Group, whose brands include Centrepoint, Max, Splash, Home Centre, Emax and Fitness First, said it found unauthorized access to one of its systems involving members of its Shukran loyalty programme. Affected members were told by WhatsApp message late on November 10, 2026 that their name, contact details and date of birth were accessed. The company says debit and credit card details are not stored on the system and were not affected, passwords were not affected and Shukran points are untouched. It contained the access, is investigating and has informed regulators and law enforcement; it has not said how many members are affected.

What should I do?

1. Be wary of calls, emails, WhatsApp and text messages claiming to be from Shukran, Centrepoint, Max, Home Centre or another Landmark brand, especially those offering points, prizes or refunds.
2. Don't share card numbers, passwords or one-time codes with anyone who contacts you about your Shukran account.
3. Check your Shukran points balance and account details in the official app for changes you didn't make.
4. Expect scam messages that use your name and date of birth to sound genuine, and verify them through Landmark's official channels.

Check the other services you use →