ManoMano Data Breach May Have Affected 38 Million People
Summary
ManoMano began notifying potentially affected customers after a January breach reportedly exposed names, email addresses, phone numbers, and support exchanges. Indra claimed to have stolen data linked to 37.8 million accounts; some details remain unconfirmed.
Key points
- ManoMano reportedly began notifying potentially affected customers about a breach that occurred in January.
- The company’s notification reportedly said data was stolen after a customer-service subcontractor was compromised.
- Reportedly affected information includes names, email addresses, phone numbers, and customer-service exchanges.
- The article says hackers may have accessed ManoMano’s Zendesk instance, but the company has not identified the hacked platform.
- A threat actor using the name Indra claimed on BreachForums to have stolen about 43GB of data, including information associated with 37.8 million accounts.
- Indra also claimed the data included more than 900,000 service tickets and 13,000 attachments; ManoMano had not responded to the attacker’s claims at publication.
Article Details
- Victim Organization
- ManoMano
- Incident Type
- Data breach involving unauthorized access to a customer support portal after a customer service subcontractor was compromised
- Data Types Exposed
- Names
- Email addresses
- Phone numbers
- Customer service exchanges
- Affected Records
- Roughly 38 million people were likely impacted. Indra claimed the data included information associated with 37.8 million user accounts, over 900,000 service tickets, and over 13,000 attachments.
- Affected Data Size
- Indra claimed to have stolen roughly 43 GB of data.
- Operational Impact
- No operational disruption was reported.
- Ransom Or Extortion
- No ransom demand or extortion activity was reported.
- Claim Status
- confirmed
Threat Actors
Products
Countries
FranceThe stolen data allegedly pertains to ManoMano users across all five European countries where it operates, namely France, Germany, Italy, Spain, and the United Kingdom.GermanyThe stolen data allegedly pertains to ManoMano users across all five European countries where it operates, namely France, Germany, Italy, Spain, and the United Kingdom.ItalyThe stolen data allegedly pertains to ManoMano users across all five European countries where it operates, namely France, Germany, Italy, Spain, and the United Kingdom.SpainThe stolen data allegedly pertains to ManoMano users across all five European countries where it operates, namely France, Germany, Italy, Spain, and the United Kingdom.TunisiaThe hacker allegedly accessed the company’s data after compromising a customer support service provider in Tunisia.United KingdomThe stolen data allegedly pertains to ManoMano users across all five European countries where it operates, namely France, Germany, Italy, Spain, and the United Kingdom.