In mid-April 2026, Fashion giant Zara lost customer data on almost 197,400 people, but it seems very little private information was actually stolen.
Zara is one of the biggest fashion retailers in the world, with more than 1,500 stores worldwide, and is the flagship brand of the Inditex Group, which also owns Bershka, Zara Home, Oysho, Pull&Bear, Massimo Dutti, Stradivarius, and Uterqüe.
Extortion gang ShinyHunters has claimed responsibility for the data breach, and leaked a 140GB archive, which seems to contain email addresses, geographic locations, purchases (product SKUs, order ID), and support tickets information. In a statement made by the company, it said the attackers did not access private information such as names, phone numbers, addresses, login credentials, or payment information.
Read more about it here.