Fashion retailer MANGO reports data breach through third-party marketing vendor
Learn More
Spanish fashion company MANGO is reporting a data breach exposing customer personal information after unauthorized access at one of its external marketing service providers.
The company claims that the breach was limited to systems managed by an unnamed third-party marketing vendor, and that MANGO's core infrastructure and corporate systems are not impacted.
MANGO claims that only non-sensitive information used for marketing purposes was exposed, including
- First names (excluding surnames)
- Country
- Postal code
- Email addresses
- Phone numbers
The number of affected individuals is not disclosed. On October 14 the company sent data breach notifications to its customers, and has notified the Spanish Data Protection Agency (AEPD) and relevant authorities about the breach. A dedicated email address (personaldata@mango.com) and telephone hotline (900 150 543) have been established to support customers concerned about the potential exposure from this incident.
MANGO warned customers to be cautious of unexpected emails or phone calls requesting unusual actions or soliciting personal information. The company reminded customers that MANGO will never requests banking details or passwords through email or phone communications.