In April 2026, Mytheresa, a luxury fashion e-commerce platform, experienced a data breach that resulted in the exposure of sensitive customer information. Following the expiration of an extortion deadline, a significant volume of data was released publicly, affecting approximately 84,000 unique email addresses. The compromised information included names, phone numbers, physical addresses, purchase history, and partial credit card details such as card type, last four digits, and expiration dates.

• Breach date: 2026-04-12
• Persons affected: 84,108
• Exposed records: 121,097

Data exposed: Name, Phone, Address, Email, Partial Credit Card Data, Purchases, Salutations

Potential risks

With access to the exposed data, attackers could engage in various malicious activities, including identity theft, targeted phishing campaigns, and financial fraud. The availability of partial credit card information may also enable unauthorized transactions or facilitate further data breaches through social engineering tactics.