Third-party breach affects Mango customer info

Global Spanish fast-fashion retailer Mango had limited customer data stolen following a cyberattack against a third-party marketing service provider, according to Cybernews.

Attackers who targeted the third-party vendor were able to pilfer customers' first names, phone numbers, email addresses, countries, and postal codes, which have been leveraged in marketing campaigns, according to Mango, which stressed that no login credentials and banking details were impacted in the incident.

More information on the third-party marketing service or the extent of the breach has not been provided. Despite praising Mango's immediate disclosure of the intrusion, AttackIQ Field Chief Information Security Officer Pete Luban emphasized the challenges associated with mitigating data exfiltration following any systems breach.

Second-wave phishing intrusions have also been on the rise, as shown by the rippling effect of the sweeping attack against Salesforce.

"...[I]mpacted individuals should not let their guards down. Attackers can still extort victims further by conducting phishing attacks using the stolen names, email addresses, and phone numbers," Luban added.