Back Securityaffairs.Co

Zara Data Breach: 197,000 Customers Exposed in Third

Securityaffairs.Co •Pierluigi Paganini • May 8, 2026

Nearly 200,000 Zara customers were exposed in a third-party breach linked to ShinyHunters, revealing emails, purchase history, and support data. Personal data belonging to nearly 197,000 Zara customers has been compromised following a cyberattack on a former technology provider used by Inditex, the Spanish fashion giant behind some of the world’s most recognized retail brands […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Zara Data Breach Exposes Information of 197,000 Customers Zara experienced a data breach affecting over 197,000 customers, attributed to the ShinyHunters extortion group. The breach involved a compromise of the Anodot analytics platform, leading to the theft of unique email addresses, product SKUs, order IDs, and support ticket details. Inditex, Zara's parent company, confirmed that sensitive information such as passwords and payment details were not compromised. The attackers leaked a 140GB archive containing the stolen data. Inditex has initiated security protocols and is notifying relevant authorities. The incident highlights ongoing vulnerabilities associated with third-party service providers. The ShinyHunters group has been linked to multiple breaches across various sectors, indicating a broader trend of targeted cyberattacks. As of now, the specific threat actor has not been officially confirmed by Inditex. 6 sources 65

Extracted Entities

Zara Data Breach: 197,000 Customers Exposed in Third

The full story

Extracted Entities

APT Groups (1)

Attack Types (1)

Companies (2)

Industries (1)

MITRE ATT&CK (1)