Confirmed breach

Mytheresa data breach

Country being checked · mytheresa.com

A breach of Mytheresa was added to Have I Been Pwned’s breach database on 27 May 2026. It affected 84,108 accounts. Exposed: Financial account and card details, Email addresses, Phone numbers, Names, Addresses and Purchases and more. The breach began on 12 April 2026, 45 days before it was reported.

Status

Confirmed breach

People affected

84,108 accounts

Reported

27 May 2026

Breach began

12 April 2026

Time to tell

45 days (the median in California’s notices over the last year: 154 days)

What was exposed

• Financial account and card details
• Email addresses
• Phone numbers
• Names
• Addresses
• Purchases
• Salutations

Sources

• Breach database · 27 May 2026 · 84,108 accountsHave I Been Pwned

Breach databases are read by code. · Corrections and changes

If Mytheresa had your data

1. Look for Mytheresa’s own notice or letter: it should say what of yours was involved. Keep it.
2. Call your bank on the number printed on your card (never one from a message), check recent payments and ask for a new card.
3. Expect scams that use your details: calls, texts or emails pretending to be Mytheresa, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

• Spot the scams that use leaked data →
• If your card or bank details leaked →
• What to do after a data breach →

Email me if Mytheresa has another breach

Alert me

One email to confirm first. We use your address only for this alert, and one click deletes it.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.