Zara data breach
The Zara breach happened on April 15, 2026 and exposed 197,376 accounts. 4 kinds of data were exposed.
Overview
- Site
- zara.com
- Breach date
- April 15, 2026
- Recorded on
- May 8, 2026
- Accounts exposed
- 197,376
- Exposed data
- Email addresses, Geographic locations, Purchases, Support tickets
- Risk score
- 29 out of 100
Risk based on the exposed data
This breach scores 29 out of 100. The score is driven mostly by Email addresses, Support tickets, Purchases.
The risk score is a guide to how dangerous a breach is, judged by the kinds of data exposed. The number of accounts is not included.
Breaches from the same period
- Kemper (2026-04-15, 269,299 accounts)
- Abrigo (2026-04-14, 711,099 accounts)
- Carnival (2026-04-18, 7,531,359 accounts)
What affected users should do
- Passwords were not exposed, but you may receive fake emails aimed at the exposed email addresses.
- Turn on two-factor authentication for your login.
This site organizes publicly available information about data breaches. Data as of May 28, 2026. Breach dates are as originally listed; when only the month is known, the date is recorded as the 1st.