Just received a notification from "Have I been pwned" saying Flexbooker got compromised and 3,756,794 accounts have been compromised including Email addresses, Names, Partial credit card info, passwords and phone numbers.
Bunnings Warehouse uses FlexBooker for click and collect.
I have a Bunnings account (for click and collect - not a 'pay 20th of the month following account) and my email does not appear in 'Have I Been Pwned'.
Maybe not all accounts were in there and / or got exfiltrated, but perhaps worth checking, especially if you are using the same email / password on more than one site.
Alan.