Data breach
Mytheresamytheresa.com
84 108 accounts exposed in a breach dated 2026-04-12.
Breached2026-04-12Added to HIBP2026-05-27 UTCUpdated by HIBP2026-05-27 UTCAccounts84 108Domainmytheresa.com
Verified
What happened in Have I Been Pwned’s words
In April 2026, the luxury fashion e-commerce platform Mytheresa was listed as a victim of the ShinyHunters "pay or leak" extortion group. After the ransom deadline passed, the group publicly released the data which contained 84k unique email addresses. The exposed data also included names, phone numbers, physical addresses, purchases and partial credit card data including card type, last 4 digits and expiry date.
Exposed data as HIBP classifies it
- Email addresses
- Names
- Partial credit card data
- Phone numbers
- Physical addresses
- Purchases
- Salutations
How HIBP qualifies it
- HIBP verified that the data came from this service.
Source: Have I Been Pwned (CC BY 4.0)
Copied from HIBP 2026-11-05 03:50 UTC