Privacy Breach Notification - Earn Monster Energy Gear Promotion (2024)
Coca-Cola Europacific Partners New Zealand Limited (CCEP NZ) has identified a privacy breach affecting some of the participants of the Earn Monster Energy Gear promotion (2024). While we do not consider there is an immediate risk to participants, we want to keep you informed.
About the Promotion
In 2024, CCEP NZ ran the Earn Monster Energy Gear promotion, which concluded on 27 October 2024. Hosted on https://monsterunleashed.co.nz/earnmonstergear, the promotion and website were managed by a third-party provider, Farrimond Limited (Farrimond). Participants of the promotion could earn and redeem points for exclusive Monster Energy gear. To ensure a seamless experience and facilitate prize distribution, the collection of entrants’ personal information by CCEP NZ was necessary.
What Happened?
We have discovered that personal information that was collected as part of this promotion, and handled by third-party provider Farrimond, has been compromised due to vulnerabilities in the promotion website’s database managed by Farrimond. No system maintained or operated by CCEP NZ or Monster Energy was involved in this incident. The exposed data includes names, email addresses, and phone numbers. Additionally, for a limited number of entrants who redeemed and received prizes, physical addresses were affected.
What Are We Doing?
We take your privacy seriously and are committed to transparency. A forensic investigation focused on how the breach occurred, potential security vulnerabilities, and any further data exposure. We have implemented enhanced security measures to prevent future incidents. We have notified the NZ Privacy Commissioner of the breach.
Why Can't We Notify You Directly?
Entrant data that was collected during the promotion period was deleted, in accordance with CCEP NZ's Terms and Conditions. As a result, we are notifying you through this public notice.
What You Can Do
While we do not believe there is an immediate risk to affected individuals, we encourage affected individuals to take the following precautions to safeguard their personal information:
- Be Cautious of Phishing and Scam Attempts
- Be wary of unexpected emails, calls, or messages claiming to be from Monster Energy, CCEP NZ, or related organisations.
- Avoid sharing personal information over the phone unless you are certain of the caller's identity.
- Monitor Your Accounts
- Regularly check your email and online accounts for any unusual activity.
- Update your passwords, especially if you use the same one across multiple platforms.
- Enable multi-factor authentication (MFA) where possible for added security.
- Stay Informed
- If you suspect misuse of your data, report it to the relevant authorities, such as CERT NZ or Netsafe.
- Stay updated on best practices for online privacy and security.
Taking these steps can help protect your personal information from potential threats.
Need More Information?
For further information about how CCEP NZ manages your personal data, please refer to our company Privacy Notice. You may also contact our Privacy Officer in New Zealand at privacy.api@ccep.com.
You also have the right to make a complaint to the NZ Privacy Commissioner about the breach.