ZARA DATA BREACH HITS 197,000 CUSTOMERS

SECURITY DESK■ 1 MIN READ

FRI, MAY 8, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

Hackers accessed Zara's databases and stole personal information from over 197,000 customers of the Spanish fast-fashion retailer, according to breach notification service Have I Been Pwned.

The breach compromised customer data stored in the retailer's systems. Zara, owned by Spanish conglomerate Inditex, has not yet released an official statement detailing the scope of exposed information or timeline of the incident. Have I Been Pwned, a platform that tracks major data breaches, confirmed the compromise and added affected customers to its searchable database. The breach represents a significant security incident for one of the world's largest fashion retailers. Customers whose data was exposed are advised to monitor their accounts for suspicious activity and consider changing passwords. The incident underscores ongoing cybersecurity challenges facing major retailers handling sensitive customer information.

■ SOURCES

► Bleeping Computer

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

P650CYBER-ATTACK BREACHES THOUSANDS OF PATIENT RECORDS IN AUSTRALIA

Partnered Health, one of Australia's largest healthcare providers, has disclosed a cyber-attack affecting 21 clinics across Sydney, Melbourne, and Canberra. Personal information and medical records were compromised in the breach.

JUST NOW— Security Desk

P648AI SYSTEM AUTOMATICALLY DISCOVERS ZERO-DAY VULNERABILITIES

Security firm Intruder has developed an AI-powered system that automatically identifies previously unknown software vulnerabilities by combining code analysis with large language models. The tool already discovered and exploited a WordPress plugin zero-day.

JUST NOW— AI Desk

P624US CHARGES THREE RUSSIANS FOR BULLETPROOF HOSTING

U.S. federal prosecutors have unsealed charges against three Russian nationals accused of operating a bulletproof hosting service that supported ransomware gangs responsible for over $62 million in damages worldwide.

6H AGO— Industry Desk

P620CISA ALERTS: SHAREPOINT FLAWS UNDER ACTIVE ATTACK

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that attackers are actively exploiting three vulnerabilities in Internet-exposed on-premises SharePoint Server instances. Organizations running affected versions must patch immediately.

6H AGO— Security Desk

◄ BACK TO NEWS

ZARA DATA BREACH HITS 197,000 CUSTOMERS

■ MORE FROM THE SECURITY DESK

■ SUBSCRIBE TO THE DAILY BRIEF