After a partner intrusion, Wanda Pet customers reported emails from a third party that had their purchase data

Listed pet retailer Wanda Pet (6968) said on 27 July 2026 that a partner’s information system had been broken into by unknown persons and that some data may have leaked; the company also said it does not connect member data, credit-card numbers or bank-account details to that partner, and has required a security review and patching ^[1]. On 19 September Wanda Pet filed a further notice that it had received reports from a small number of customers that a third party appeared to have obtained purchase data and contacted them by email; the company said it had preserved data on its own systems and was investigating. Both filings said there was no material financial or operational impact and neither published a headcount or itemized data list ^[2]. United Daily News reported that some Pet Park app customers had received emails listing real items, dates and amounts, and quoted a security specialist advising that even if the message matches an order, recipients should not click links or call numbers in the email, and should confirm only through the brand’s official app, website or customer-service line ^[3].

Industries mainly affected: Retail