What was exposed, when it happened, and which databases confirm it.
- accounts
- 197,376
- Breached
- April 15, 2026
- Last Update
- May 8, 2026
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In April 2026, the fashion brand Zara was among a number of organisations targeted by the ShinyHunters extortion group as part of their "pay or leak" campaign. The group claimed the breach was related to a compromise of the Anodot analytics platform and subsequently published a terabyte of data allegedly including 95M support ticket records. The data contained 197k unique email addresses alongside product SKUs, order IDs and the market the support ticket originated in. Zara's parent company Inditex advised that the incident didn't affect passwords or payment information.
Compromised Info
- Email addresses
- Geographic locations
- Purchases
- Support tickets
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- HIBP
FAQ
What was leaked in the Zara breach?
The Zara breach exposed: Email addresses, Geographic locations, Purchases, and Support tickets.
When did the Zara breach happen?
The Zara breach was disclosed on April 15, 2026 and affected 197,376 records.
Am I affected by the Zara breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the Zara leak.