Mango has become the latest retailer to face a cyber-attack, where “limited” shopper data was stolen from one of its external marketing services.
The fashion chain, which recently reported a sales boost, told customers that data “accessed” by hackers was limited to personal contact details used in its marketing campaigns.
This included email addresses, country, first names, telephone numbers and postal addresses.
It added that unauthorised access was made via a third-party supplier, based in Spain, that held some customer data and was not directed at Mango.
In an email sent to shoppers yesterday (15 October), Mango confirmed that credit cards, banking information, passports and login credentials including passwords had “under no circumstances been compromised”.
Related Story
The email said: “In accordance with current regulations and following our internal protocol, Mango has informed the Data Protection Agency and the authorities.
“We are issuing this communication as a precaution and recommend that all our customers pay attention to any suspicious communications or requests for unusual actions, whether by email or phone.”
“Mango operations and company systems are unaffected.”
Mango said it immediately activated all security protocols as soon as it was made aware of the situation. It is also set to notify the Information Commissioner’s Office within the next 24 hours.
The business confirmed that Mango operations and company systems were unaffected.
It also noted that shoppers were able to continue shopping safely through its app, website and stores.
The incident follows a host of hacking incidents on retailers in recent times. M&S reported a cyber-attack earlier this year, after its contactless payments failed across UK stores in April.
Retailers such as Co-op, Harrods and Pandora have also faced cyber-attacks this year.
Click here to sign up to Retail Gazette‘s free daily email newsletter
