Notice of Data Security Incident

March 18, 2026 – Unibail‑Rodamco‑Westfield (URW) is notifying Westfield Southcenter customers of a cybersecurity incident that occurred between February 12 and February 18, 2026, affecting one of its IT systems and resulting in unauthorized access to files containing limited loyalty‑program customer information and newsletter‑subscriber data.


The incident was discovered on February 18, 2026, and URW immediately took action to contain and investigate the incident, confirming that it did not impact the company’s broader IT or operational ecosystem. On March 12, 2026, URW completed a comprehensive review of the impacted files to determine which customers may have been affected. The data involved includes customers’ first and last names and, if provided, dates of birth.


No financial information, including bank account or credit card numbers, or passwords were affected. Nonetheless, as a precaution, the company is providing customers with contact information for the three nationwide credit reporting agencies:


TransUnion 1-800-680-7289 or www.transunion.com
TransUnion Fraud Alert P.O. Box 2000, Chester, PA 19016-2000
TransUnion Credit Freeze P.O. Box 160, Woodlyn, PA 19094

Experian 1-888-397-3742 or www.experian.com
Experian Fraud Alert P.O. Box 9554, Allen, TX 75013
Experian Credit Freeze P.O. Box 9554, Allen, TX 75013

Equifax 1-888-298-0045 or www.equifax.com
Equifax Fraud Alert P.O. Box 105069 , Atlanta, GA 30348-5069
Equifax Credit Freeze P.O. Box 105788, Atlanta, GA 30348-5788


The protection of customer data is a top priority for URW, which continually works to strengthen its digital security systems. Should you have additional questions or concerns, please do not hesitate to contact URW at privacy@urw.com or at 2049 Century Park East, 42nd Floor, Century City, CA 90067.


# # #