Inditex reports unauthorised access to transaction databases

Thursday 16 April 2026 - 07:30

Spanish fashion giant Inditex, the parent company of Zara, has reported an incident involving unauthorised access to transaction-related databases hosted by an external service provider.

According to the company, the affected systems contained information linked to customer transactions but did not include sensitive personal data such as passwords, home addresses, or bank card details. This distinction is likely to reassure customers amid growing concerns about data security in the retail sector.

Inditex stated that it acted promptly after detecting the issue, implementing security protocols and taking steps to contain the situation. The company also began notifying relevant authorities in line with regulatory requirements.

Cybersecurity incidents have become increasingly common across global industries, particularly as companies rely more heavily on third-party digital infrastructure. Retailers, in particular, are frequent targets due to the volume of transactional data they handle.

While the company has emphasized that critical personal information was not compromised, the incident highlights the importance of robust cybersecurity measures and constant monitoring of external partners.

As digital ecosystems expand, businesses like Inditex continue to face the challenge of safeguarding data while maintaining seamless operations across global markets.