Mytheresa — data breach (Mytheresa)

Domain: mytheresa.com · Accounts affected: 84,108 · Data exposed: Email addresses, Names, Partial credit card data, Phone numbers, Physical addresses, Purchases, Salutations · Verified breach — In April 2026, the luxury fashion e-commerce platform Mytheresa was listed as a victim of the ShinyHunters "pay or leak" extortion group. After the ransom deadline passed, the group publicly released the data which contained 84k unique email addresses. The exposed data also included names, phone numbers, physical addresses, purchases and partial credit card data including card type, last 4 digits and expiry date.