Mango undergoes a cyberattack: customer contact details exposed by a breach in an external supplier

The renowned fashion chain Mango, one of the Spanish giants in the textile sector, has notified its customers of having suffered a cyberattack that exposed personal data managed by one of its external marketing providers. The incident, which occurred last weekend and reported on October 13 and 14, adds Mango to the list of companies affected by security breaches linked to third parties in 2025.

​

What data has been compromised in the cyberattack on Mango

The company has clarified that the attack did not affect either its corporate systems or the normal operation of the online store, since the unauthorized access occurred in an external system responsible for marketing campaigns. The filtered data corresponds to:

• First name (not last name)
• Country and zip code
• Telephone
• Email address

Under no circumstances has customer banking information (credit cards), access credentials, DNIs, passports or passwords been exposed, so direct risk to financial assets is limited.

​

Mango feedback and recommendations for customers

Mango immediately activated its security protocols, notified the incident to the Spanish Data Protection Agency and has brought the incident to the attention of the authorities. The brand recommends that its customers exercise extreme vigilance in the face of possible emails, calls or suspicious requests for additional information and offers a dedicated channel to answer any questions: personaldata@mango.com.​

Users should remember that no sensitive data has been compromised, but it is important to be alert to any phishing, impersonation or fraud intent by taking advantage of basic leaked information.

‍

Lessons for the industry and the importance of the supply chain

Once again, the incident shows that cybersecurity does not only depend on our own systems, but also on the entire supply chain, especially when they manage personal data for commercial campaigns. Ensuring regular audits, establishing strict data protection agreements and training staff are essential measures to prevent and react appropriately.

‍

Does your company actively analyze and protect the digital supply chain?

‍
🛡️ At Apolo Cybersecurity, we help assess risks, establish controls and form teams to prevent incidents such as the one that occurred at Mango. Don't leave your data or reputation in the hands of chance.

‍