Zara
Data Breach on April 20, 2026
| Data Breach Report | |||
|---|---|---|---|
| Victim | zara.com | ||
| Claimed By | ShinyHunters | ||
| Date Discovered | Apr 20, 2026 | ||
| Description | Zara is a fashion retail company based in Spain that designs, manufactures, and distributes fast-fashion clothing and accessories worldwide. | ||
| Leak Size | Unknown |
Credential Exposure for zara.com
We've indexed 215 @zara.com accounts from external breaches, plus 73,875 credentials for zara.com itself.
Last checked Aug 31, 2026
| @zara.com addresses from external breaches | |
|---|---|
| Third-party breaches | 110 accounts · across 62 breaches · 83 with a plaintext password · most recent May 6, 2021 |
| Combo lists | 108 accounts · most recent Aug 25, 2026 |
| Phishing pages | 25 accounts · most recent Aug 13, 2026 |
| Passwords for zara.com accounts | |
|---|---|
| Infostealer logs | 38,920 logins · 31,386 infected devices · most recent Aug 31, 2026 |
| Combo lists | 36,364 logins · most recent Aug 30, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
Zara was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.