Sensitive customer info exposed in Mango data breach - here's what we know

• Mango suffered a third-party breach exposing customer details, but no financial data
• Notifications warn of phishing risks; Spanish authorities & police informed
• ShinyHunters, known data extortion group, may be linked to recent retail sector breaches

Retail powerhouse Mango, a firm with more than 2,500 stores worldwide and operates in more than 120 markets, has suffered a third party data breach, losing sensitive customer information on a yet-undisclosed number of customers.

Earlier this week, the company sent out data breach notifications to its customers, warning them about potential incoming social engineering and other attacks. In the breach, Mango said that certain personal data was accessed through a breach at one of its external marketing services providers.

The attackers, which have not been named, stole people’s first names (surnames were not grabbed), countries, postal codes, email addresses, and phone numbers. Sensitive financial information, such as banking data ...