Zara Data Breach: 197,000 Customers Exposed in Third-Party Security Incident

Zara (Inditex) was impacted by a third-party security incident tied to the ShinyHunters extortion group, which claimed to have used compromised Anodot tokens to exfiltrate a ~140GB BigQuery archive exposing roughly 197,400 customer email addresses along with order IDs, product SKUs, purchase histories and support tickets; Inditex states passwords and payment information were not exposed and operations were unaffected.