You should carefully review the information that was affected by this incident and think about whether this could result in you experiencing any harm. Some of the steps you may consider taking to protect yourself include:
•   Be aware of emails and telephone calls from people requesting or seeking to confirm your personal details (especially things like your date of birth, residential address, email address, username or passwords which are often used to verify your identity).
•   Whilst the incident did not involve passwords, monitor your online and other accounts for unusual activity and unauthorised attempts to gain access using your personal information. Make sure that your passwords do not use your personal information.
•   Whilst the incident did not involve financial information, monitor online banking accounts for unusual activity and unauthorised attempts to gain access using your personal information. You may wish to consider alerting your financial institutions so that they can implement additional monitoring and security protocols on your accounts. Enable multi-factor authentication if possible.
•   Consider updating your email security settings and enabling Two-Factor Authentication (2FA) where possible.

Vorwerk Australia & New Zealand has partnered with IDCARE, Australia’s national identity and cyber support community service. They have expert Case Managers who can work with you in addressing concerns in relation to personal information risks and any instances where you think your information may have been misused.
•   IDCARE’s services are at no cost to you.
•   If you wish to speak with one of their expert Case Managers please complete an online Get Help form at www.idcare.org or call 1800 595 160 (in Australia) or 0800 121 068 (in New Zealand)
•   IDCARE specialist Case Managers are available from 9am-5pm AEST Monday to Friday excluding public holidays.
•   When engaging IDCARE please use the referral code VRWKA25.

Affected data fields include: name, address, birthday, phone number, email address and cooking & Thermomix® preferences. Passwords are not affected.

• Anyone that thinks they might have been impacted should contact IDCARE by completing the ‘Get Help Now’ form (for Individuals) at www.idcare.org or calling them on 1800 595 160 (AU) or 0800 121 068 (NZ). Please use the referral code VRWKA25.
• Useful Fact Sheets about how to keep your data safe can be found on IDCARE’s website https://www.idcare.org/learning-centre/fact-sheets
• Contact our Privacy Officer at privacyofficer@thermomix.com.au
• Visit https://www.oaic.gov.au/privacy/privacy-complaints

Vorwerk’s investigation has established that a secondary server at one of our external service providers was illegally used by third parties to gain access to certain data fields, which included personal information, during the period January 30th and February 3rd, 2025. The unauthorised access was detected promptly, and the incident was contained. The compromised secondary server has been taken offline and retired.

Vorwerk takes privacy and data protection very seriously and remains committed to the continuous improvement of its practices, systems and security. Vorwerk’s investigation is ongoing and we continue to work with cybersecurity specialists to investigate the attack. As a result of the action taken by us, we have prevented similar incidents occurring in the future.

Vorwerk took immediate action upon discovering the incident and we will work closely with all relevant authorities to ensure all necessary steps are taken.

The data leak is isolated to the online recipe community forum in Australia, Czech Republic, France, Germany, Italy, New Zealand, Poland, Portugal and Spain.

Vorwerk continues to work with cybersecurity specialists to investigate the attack.

Please email your request to delete your account to us at privacyofficer@thermomix.com.au. Please include your full name, Recipe Community username and the email address associated with your account. We will respond to you within 30-days of receiving this request.