Landmark Group has alerted some Shukran members that their names, contact details, and dates of birth were accessed without authorisation.
Landmark Group is the Dubai retail group behind Max, Centrepoint, and Home Centre. It runs Shukran as its flagship loyalty programme, which Gulf News describes as “connecting millions of members across the GCC, Asia and Africa”.
Khaleej Times reports that members who received the alert should assume their information is among the records involved.
Landmark sent the messages late on Tuesday, 10 November 2026, advising members to stay alert to suspicious calls, emails, and messages. Gulf News reports they went to members’ WhatsApp accounts, while Khaleej Times refers to an SMS alert.
Gulf News quotes the alert as saying: “We have identified an incident involving unauthorised access to some of your personal information including your name, contact details, DOB.”
We recently identified an incident involving unauthorised access to some of our systems. We acted immediately to contain it and launched an investigation.
Landmark Group, in a statement
What wasn’t affected
Landmark says payment cards and passwords are safe. It doesn’t store debit or credit card details on its systems, and it says passwords are securely protected and not stored in readable form. Landmark says Shukran points, balances, and wallets are unaffected too, and the app and loyalty services still work as normal.
Landmark says the investigation is still under way, and that it has told the authorities.
What Landmark hasn’t said
The company hasn’t disclosed how many customers were affected, when the access happened, or how its systems were reached. It also hasn’t said whether any information was copied or misused. The National points out that Landmark didn’t specify how severe the breach was.
The National cites IBM’s report that the average data breach for Middle East organisations cost $8 million this year. Tbreak covered a similar case in June, when LastPass customer data was stolen in a third-party Klue breach.
What members should do
Khaleej Times reports that Shukran’s published Q&A, at shukran.com/qa, advises members to:
- Treat unexpected calls, emails, SMS, or WhatsApp messages that mention Landmark Group, Shukran, or its brands with suspicion.
- Never share passwords, one-time passcodes (OTPs), banking details, or ID documents with anyone who contacts you.
- Be wary of urgency, unexpected links or attachments, and unsolicited refunds, prizes, or bonus points.
- Use a strong, unique Shukran password, and don’t reuse it on other sites.
Shukran says it will ask for an OTP only over the counter in a store or within the Shukran app, and never by phone or email.
