Inditex Reports Unauthorized Access to Transaction Databases
Severity: Low (Score: 36.9)
Sources: Globalbankingandfinance, Straitstimes, cybernews.com
Summary
Inditex, the owner of Zara, announced unauthorized access to transaction databases hosted by a third-party technology provider. The breach does not involve customer personal data, addresses, passwords, or bank card details, as confirmed by the company. Inditex stated that the incident was linked to a security issue affecting a former technology provider, impacting several international companies. Security protocols were implemented immediately, and relevant authorities were notified. The company has not disclosed further details about the incident. This breach highlights vulnerabilities associated with third-party service providers in the retail sector. Key Points: • Inditex confirmed unauthorized access to transaction databases without customer data exposure. • The breach originated from a security incident involving a former technology provider. • Inditex promptly enacted security measures and notified authorities about the breach.
Key Entities
- Data Breach (attack_type)
- Salesforce Attack Campaign (campaign)
- Co-op (company)
- Harrods (company)
- Inditex (company)
- Mango (company)
- Marks & Spencers (company)
- cybernews.com (domain)
- Retail (industry)
- T1566 - Phishing (mitre_attack)
- Scattered Spider (apt_group)
- ShinyHunters (apt_group)