MANGO, the Spanish global fashion retailer, disclosed in October 2025 that a third-party marketing provider had been compromised, exposing customer data. Exposed information included customer first names, countries of residence, postal codes, email addresses, and phone numbers. MANGO notified affected customers and filed notifications with relevant European data protection authorities. The breach did not expose payment information or full postal addresses.