Skip to content
Cyber Breaches
Search
Data breachResolved

Zara data breach (2026)

In April 2026, the fashion brand Zara was among a number of organisations targeted by the ShinyHunters extortion group as part of their "pay or leak" campaign.

Victim
Zara
records
197.4K
SectorFinance

Imported from Have I Been Pwned — pending editorial review and translation to French. The summary below is machine-extracted; consult the source for details.

In 2026-04-15, Zara was affected by a data breach. Approximately 197,376 accounts were exposed. In April 2026, the fashion brand Zara was among a number of organisations targeted by the ShinyHunters extortion group as part of their "pay or leak" campaign.

Sources

  1. haveibeenpwned.comhttps://haveibeenpwned.com/PwnedWebsites#Zara
  2. zara.comhttps://zara.com

Related incidents

Data breachUnknown

23,685 records: claimed leak at ATOA

A threat actor put a database from ATOA — a French real-estate tokenization and fractional-investment fintech — up for sale on a dark web forum, exposing roughly 23,685 user and financial records plus 326 full KYC archives containing passports, ID cards and banking details.

Victim
ATOA
Records
23.7K