Zara owner Inditex said it had identified unauthorised access to databases hosted by a third party containing information on transactions with customers.
The databases do not contain customer data, addresses, passwords, or bank card details, Inditex said in a statement late on Wednesday, adding that it immediately applied security protocols and started notifying relevant authorities.
The breach “stems from a security incident that affected a former technology provider and has impacted several companies operating internationally”, the company said. A spokesperson declined to give any further information.
