DOUGLAS Group vs Flink

DOUGLAS Group reports third quarter results in line with expectations and confirms full-year guidance

Q3 sales declined 2.0% to 987.8 million euros, adjusted EBITDA margin 12.9%; full-year guidance confirmed for FY 2025/2026.

DOUGLAS Group publishes 9M FY 2025/26 Interim Statement and Results Presentation

New interim statement for the first nine months of fiscal year 2025/26, along with a results presentation and a webcast recording of the financial results.

Douglas shifts to digital after weak core markets

Douglas Group reported weaker Q3 2025/26 results as demand softened in key Western European markets and price competition intensified. April–June revenue fell 2.0% to €987.8m and adjusted EBITDA declined 19.4% to €127.5m (margin 12.9%). Nine-month revenue rose slightly (+0.5% to €3.61bn) while adjusted EBITDA fell 9.0% to €577.3m. The company confirmed its full-year guidance for 2025/26 and said it will increase its digital focus, review and rationalize its store network, expand exclusive brands and cross-channel services, and standardize group-wide structures. E‑commerce trends vary regionally (double-digit growth in parts of Southern/Central Europe and France but declines in DACHNL), Retail Media revenue grew 24%, and Click & Collect Express usage rose. Douglas plans to present a strategy update (“Let it Bloom”) in Q4 2026 emphasizing technology, e‑commerce, cross‑channel services, and a more profitable store footprint.

• Douglas Group Q3 (Apr–Jun 2025/26) revenue: €987.8 million, down 2.0%.
• Adjusted EBITDA in Q3 fell 19.4% to €127.5 million; adjusted EBITDA margin: 12.9%.
• Nine-month revenue increased 0.5% to €3.61 billion; nine-month adjusted EBITDA decreased 9.0% to €577.3 million (margin 16.0%).

Cyberattack on Flink: Hackers Demand Ransom Directly from Customers

After a cyberattack on the German rapid delivery service Flink, hackers have stolen personal data of about one million customers and 13,000 employees. Because Flink refused to negotiate or pay a ransom, the attackers are now directly contacting individual customers via email, demanding 0.005 Ether (about €11.50) to prevent data sale. This 'triple extortion' tactic is unusual in German-speaking regions. The stolen data includes names, email addresses, postal addresses, and phone numbers, potentially also delivery-related details. Flink has stopped the breach, which occurred through a former employee's compromised account, and is cooperating with forensic experts and authorities. Legal experts note that customers may claim damages under GDPR, especially after a recent German Federal Court ruling that loss of control over personal data alone constitutes compensable damage.

• Hackers stole personal data of about 1 million customers and 13,000 employees from Flink.
• Flink refused to pay ransom, leading attackers to demand 0.005 Ether (approx. €11.50) directly from customers.
• The breach occurred via a former employee's compromised internal account.

Uber Eats, Wolt, Flink, Lieferando dominate German quick commerce

A YouGov study reveals that 37% of German consumers use quick commerce services for groceries and daily goods, with usage highest among younger demographics. Flink's brand awareness has doubled since 2021 to 36.5%, surpassing Wolt (33.7%) but trailing Uber Eats (50.4%). In terms of purchase consideration, Lieferando leads at around 20%, followed by Uber Eats (6.9%) and Flink (6.5%), while Wolt trails at 3%. The study highlights the growing importance of quick commerce as a regular part of digital shopping in Germany.

• 37% of German consumers use quick commerce services at least occasionally.
• Flink's brand awareness doubled from 18.1% in 2021 to 36.5% in 2026.
• Uber Eats has highest awareness at 50.4%, followed by Flink (36.5%) and Wolt (33.7%).

Flink Data Breach: Delivery Service Warns of Phishing and Extortion

German quick-commerce delivery service Flink has alerted customers to a data breach after an unauthorized person accessed one of its internal systems using compromised credentials. The incident was detected on Friday, and the affected access was promptly deactivated. An investigation with external IT forensics and cybersecurity experts is underway. Potentially exposed data includes names, email addresses, postal addresses, phone numbers, and, possibly, delivery-related information such as floor, entrance, and special delivery instructions. The company states that passwords and payment information are not affected. Flink warns customers about potential phishing and extortion attempts following the breach and advises them not to make any payments, as the company will never request money or cryptocurrency. Authorities have been notified, and criminal charges have been filed.

• Flink disclosed a data breach involving unauthorized access to an internal system via compromised credentials.
• Potentially exposed data includes names, email addresses, postal addresses, phone numbers, and possible delivery details.
• Passwords and payment information are stated as not affected.