French DIY etailer ManoMano admits customer data stolen

French online marketplace ManoMano is warning customers their personal data was siphoned off after a cyberattack hit one of its customer support subcontractors – and criminals are already claiming the haul is far larger than the company's carefully worded notice suggests.

In a letter sent to affected users, seen by The Register, ManoMano said it was informed that a customer service provider was hit by a cyberattack in January 2026 that led to "the unauthorized download of personal data associated with your customer account." The company said its investigation found that "an illegal data extraction was carried out from the account of one of our subcontractor's agents."

The exposed data includes first and last names, email addresses, phone numbers, and "any potential exchanges you may have had with our customer service department." ManoMano stressed that "your password is not affected" and that customer data "remains intact and has not ...