A list of over 2,240 Internet Shopping accounts was posted Online on the Pastebin website by some unknown hackers on Thursday, allowing access to online shopping accounts, personal details and Tesco Clubcard vouchers. A Tesco spokesperson said that this information has not come from Tesco’s website itself, rather there have been high profile hacks on other businesses. The hackers compiled the stolen details from other websites and then found that Tesco customers used the same username and password combination as those on previous hacks. The company has also encountered several security issues with its website, where an XSS flaw left customers at risk of having accounts hijacked.
Source: https://thehackernews.com/2014/02/Tesco-emails-databased-hacked_15.html