Mytheresa: a data breach
In April 2026, the luxury fashion e-commerce platform Mytheresa was listed as a victim of the ShinyHunters "pay or leak" extortion group . After the ransom deadline passed, the group publicly released the data which contained 84k unique email addresses. The exposed data also included names, phone numbers, physical addresses, purchases and partial credit card data including card type, last 4 digits and expiry date.
The record
- Organisation
- Mytheresa →
- Identity
- Mytheresaidentified by its domain in a verified breach record
- Records affected
- 84,108 records
- Data exposed
- Email addresses, Names, Partial credit card data, Phone numbers, Physical addresses, Purchases, Salutations
- Sector
- Not recorded
- Occurred
- 2026-04-12
- Disclosed
- 2026-05-27
- First recorded here
- 2026-09-09
Fastnexa security experts
Worried the same could happen to your company?
If you are a customer or supplier of Mytheresa, or work in the same industry, a Fastnexa security expert can tell you what this means for your data and test whether the same attack would work on you.
Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →
Sources (1)
One source so far.
- Have I Been Pwned ↗First reported
2026-05-27