Zara Hit by ShinyHunters Data Breach Exposing 197K Customer Records
Last month, global fashion retailer Zara was confirmed as a victim of a data breach linked to the cybercriminal group ShinyHunters. The incident resulted in the exposure of 197,000 unique email addresses, along with customer support records, product SKUs, and order IDs.
According to reports, 60% of the leaked emails were already present in LinkedIn’s database, suggesting prior exposure in other breaches. The compromised data did not include financial information but could be leveraged for phishing or targeted attacks.
ShinyHunters, known for selling stolen data on underground forums, has been linked to multiple high-profile breaches in recent years. The full extent of the breach’s impact remains under investigation, though the exposed records may increase risks for affected customers.
Source: https://www.linkedin.com/feed/update/urn:li:activity:7458416182526722048
ZARA cybersecurity rating report: https://www.rankiteo.com/company/zara
"id": "ZAR1778228840",
"linkid": "zara",
"type": "Breach",
"date": "4/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '197,000',
'industry': 'Fashion/Retail',
'location': 'Global',
'name': 'Zara',
'type': 'Retailer'}],
'data_breach': {'number_of_records_exposed': '197,000',
'personally_identifiable_information': 'Email addresses',
'sensitivity_of_data': 'Moderate (no financial information)',
'type_of_data_compromised': ['Email addresses',
'Customer support records',
'Product SKUs',
'Order IDs']},
'description': 'Global fashion retailer Zara was confirmed as a victim of a '
'data breach linked to the cybercriminal group ShinyHunters. '
'The incident resulted in the exposure of 197,000 unique email '
'addresses, along with customer support records, product SKUs, '
'and order IDs. The compromised data did not include financial '
'information but could be leveraged for phishing or targeted '
'attacks.',
'impact': {'data_compromised': '197,000 unique email addresses, customer '
'support records, product SKUs, and order IDs',
'identity_theft_risk': 'Increased risk for phishing or targeted '
'attacks'},
'initial_access_broker': {'data_sold_on_dark_web': 'Likely'},
'investigation_status': 'Ongoing',
'motivation': 'Data Theft for Sale',
'references': [{'source': 'Cybersecurity Reports'}],
'threat_actor': 'ShinyHunters',
'title': 'Zara Hit by ShinyHunters Data Breach Exposing 197K Customer Records',
'type': 'Data Breach'}