Security incident on our website

Between 22 and 29 October 2026, unauthorised persons got into our website vanheurck.com through a security flaw in the website software. We found this on 29 October, closed the flaw immediately and took the website offline for a full check. The incident has been reported to the Belgian Data Protection Authority.

Who is concerned?

• Customers with an account on our website: they receive a personal e-mail about this.
• People who used our contact form (2016 – 2026) and buyers in our former webshop (2018 – 2021).

Which data may have been seen?

We cannot exclude that the following data in the website database was viewed: name, company, e-mail address, phone number, address, the text of messages sent through the contact form and, for accounts, the password in encrypted form. No payment data was stored on the website. Our ERP system, with orders and invoices, runs on a separate server and was not affected.

What have we done?

• The security flaw is closed and the website has been fully checked.
• All website passwords have been replaced.
• Old data we no longer need has been deleted.
• The website has been rebuilt on a new, secure server.

What do we advise?

• Do you have an account on our website? Choose a new password via My account > “Lost password”.
• Do you use the same password on other websites? Please change it there too.
• Watch out for suspicious e-mails pretending to come from Van Heurck. We never ask for your password by e-mail or phone.

We apologise for the inconvenience. If you have any questions, please write to info@vanheurck.com.