2026 Mytheresa — ShinyHunters leak-site dump claim (~84k records; unverified)
Data compromised
XON/actor fields (unverified): email addresses, names, phone numbers, physical addresses, partial credit card data, purchases — 84,370 records in XposedOrNot H1 census
Technical writeup
Unverified leak-site / extortion claim — Cybernews reported April 23, 2026 that ShinyHunters dumped data tied to Mytheresa alongside Zara, Carnival, and 7-Eleven after listing the brands. XposedOrNot H1 2026 indexes Mytheresa at 84,370 records (emails, names, phones, addresses, partial card data, purchases). Mytheresa had not published a matching customer census confirming the dump at catalog time. recordsAffected 84370 (unverified actor/XON census); companyConfirmed false.
Root cause
Unverified ShinyHunters extortion / leak-site publication of alleged Mytheresa customer data