Zara
Data Breach on April 20, 2026
| Data Breach Report | |||
|---|---|---|---|
| Victim | zara.com | ||
| Claimed By | ShinyHunters | ||
| Date Discovered | Apr 20, 2026 | ||
| Description | Zara is a fashion retail company based in Spain that designs, manufactures, and distributes fast-fashion clothing and accessories worldwide. | ||
| Leak Size | Unknown |
Credential Exposure for zara.com
We've indexed 220 @zara.com accounts from external breaches, plus 80,881 credentials for zara.com itself.
Last checked Oct 11, 2026
| @zara.com addresses from external breaches | |
|---|---|
| Combo lists | 113 accounts · most recent Oct 10, 2026 |
| Third-party breaches | 110 accounts · across 62 breaches · 83 with a plaintext password · most recent May 6, 2021 |
| Phishing pages | 25 accounts · most recent Aug 13, 2026 |
| Passwords for zara.com accounts | |
|---|---|
| Infostealer logs | 41,692 logins · 33,022 infected devices · most recent Oct 11, 2026 |
| Combo lists | 40,654 logins · most recent Oct 10, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
Zara was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.