Dis-Chem Pharmacy has launched an investigation after personal information of more than 3.7 million people was hacked at one of its third-party service providers.

In a statement on Thursday, the Dis-chem said it launched an investigation as soon as it became aware of the incident on 1 May.

“Our investigation has revealed that the incident affected a total of 3 687 881 data subjects and that the following personal information was accessed – first name and surname; email address; and cell phone number.”

Dis-Chem warned that there is a possibility that any impacted personal information may be used by the unauthorised party to commit further criminal activities, such as phishing attacks, emails compromises, social engineering and/or impersonation attempts.

The group said that no identification numbers, medical, financial or banking information was contained in this database.