French DIY etailer ManoMano admits customer data stolen

ManoMano reported that a January 2026 cyberattack on a customer-service subcontractor led to the unauthorized extraction of customer personal data (first/last names, email addresses, phone numbers and support exchanges). A BreachForums user claims a far larger dataset—about 37.8 million accounts and many support tickets and attachments—while ManoMano says passwords were not affected, revoked the subcontractor's access, notified CNIL and ANSSI, and warned customers to watch for phishing or impersonation attempts.