Europe's ManoMano Hit: 38M Customer Records Compromised in Vendor Breach

"ManoMano has recently notified customers about a security incident involving one of our third-party customer service providers (a subcontractor). The incident, discovered in January 2026, underscores the persistent risk posed by supply chain and vendor-based breaches."

"ManoMano is one of Europe's largest online marketplaces for DIY, gardening, and home improvement products, operating across France, Belgium, Spain, Italy, Germany, and the United Kingdom. The platform draws roughly 50 million unique monthly visitors, and with nearly 38 million individuals affected, the breach stands as one of the more significant retail-sector data exposures in Europe in recent months."

"According to BleepingComputer, the scope of compromised data varies depending on a customer's interaction with the platform. Exposed information may include full names, email addresses, phone numbers, and customer service communications. ManoMano stressed that no account passwords were accessed and that there is no evidence of data being modified within its internal systems."

ManoMano, a major European DIY and home improvement marketplace with 50 million monthly visitors, discovered a security incident in January 2026 affecting approximately 38 million customers. A threat actor compromised a third-party customer service subcontractor, exposing personal information including names, email addresses, phone numbers, and customer service communications. The breach represents one of Europe's significant retail data exposures. ManoMano confirmed no passwords were accessed and no internal data was modified. A threat actor claiming the alias Indra took responsibility on a hacker forum, alleging possession of 37.8 million user records and thousands of support tickets. Reports suggest the compromised organization was a Tunis-based subcontractor with a Zendesk environment.

Read at TechRepublic