French DIY marketplace ManoMano breached via customer-service subcontractor; data of about 38 million customers taken

According to BleepingComputer, French DIY marketplace ManoMano confirmed it identified unauthorized access linked to a customer-service subcontractor in January 2026, resulting in extraction of personal data tied to customer accounts and support interactions ^[1]. According to the same report, about 38 million people are affected; exposed data includes names, emails, phone numbers and support communications, and no passwords were accessed ^[1]. ManoMano advises customers to verify incoming communications and senders, monitor bank accounts for fraudulent transactions, and avoid suspicious links or attachments ^[1].

Industries mainly affected: Retail

1. Verify incoming messages and senders; do not click suspicious links or open attachments ^[1].
2. Monitor bank accounts for fraudulent transactions ^[1].