Breach Record

Zara

DISCLOSED 2026-04-15 · STOLEN CREDS · 197,376 RECORDS EXPOSED

In April 2026, the fashion brand Zara was among a number of organisations targeted by the ShinyHunters extortion group as part of their "pay or leak" campaign. The group claimed the breach was related to a compromise of the Anodot analytics platform and subsequently published a terabyte of data allegedly including 95M support ticket records. The data contained 197k unique...

The record

What we know

Disclosed

2026-04-15

Attack vector

Stolen Creds

Records exposed

197,376

Domain

zara.com

Data classes exposed

Email addressesGeographic locationsPurchasesSupport tickets

Sources

Cited reporting

↗ Have I Been Pwned (2026-05-08)

Similar vector · recent

Other stolen creds breaches on file

This page is the permanent ColdRecon entry for the Zara disclosure. It updates if new public reporting emerges. All tracked breaches →

Zara just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →