The Data Protection Commissioner said the company at the centre of the Supervalu and Axa data breach should not have been holding on to credit card details.
Billy Hawkes sent a team of inpectors to Loyaltybuild in Ennis Co. Clare today - and they confirmed that the full credit card details of 70,000 Supervalu Getaway customers were stolen.
And over 8000 Axa Leisure Break customers had their credit card details hacked by an external source.
They are being advised to check their statments between January 2011 and February 2012.
In total - the details of 1.1 million customers in Europe were hacked - though not all of these had financial data stolen.
AUDIO: Commissioner Billy Hawkes says Loyaltybuild has questions to answer: