Spanish fashion retailer MANGO has confirmed that a third-party marketing provider suffered a data breach, leading to unauthorized access to customer information used in marketing campaigns.
What Happened
On October 14, 2025, MANGO began notifying customers that personal data from marketing systems had been compromised.
“One of the external marketing services has suffered unauthorized access to certain customers' personal data,” said the company.
The exposed information includes:
- First name
- Country
- Postal code
- Email address
- Telephone number
Importantly, last names, passwords, IDs, and banking details were not compromised, reducing the risk of direct identity theft.
MANGO’s Response
The company stated that its corporate IT systems and infrastructure remain unaffected, and business operations continue as normal.
“Mango’s corporate infrastructure and systems have not been compromised,” the company assured.
MANGO activated all security protocols, notified the Spanish Data Protection Agency (AEPD), and set up dedicated support for affected customers:
📧 personaldata@mango.com
📞 +34 900 150 543
No ransomware groups have claimed responsibility, and the identity of the attackers remains unknown.
What Customers Should Know
Although the breach involves limited data, exposed contact details can be exploited in targeted phishing or scam attempts. Customers should:
- Be cautious of emails or SMS messages claiming to be from MANGO.
- Avoid clicking links or providing personal details unless verified.
- Monitor inboxes for unusual activity.
About MANGO
Founded in 1984 in Barcelona, MANGO operates 2,800 stores across 120 countries and employs over 16,000 people. The company generates €3.3 billion annually, with nearly 30% of sales online.
Alcaeus Services Insight
Even trusted brands can fall victim to third-party breaches, proving that supply chain security is often the weakest link.
At Alcaeus Services, we help organizations assess, monitor, and secure their vendor ecosystems — ensuring that partner vulnerabilities don’t become customer risks.
