Could You Be Affected by the Mango Data Breach?

A recent cyberattack has exposed the personal details of Mango customers. Register your interest to stay informed and receive updates if this claim is taken forward by one of our partner law firms. 

Join the Claim isn’t a law firm. We connect you with regulated UK firms that run group action claims. If one of our partner firms takes this case forward, we’ll share more details, including how to check your eligibility.
Join the Claim Limited is a claims management company. This claim is not regulated by the Financial Conduct Authority. Join the Claim Limited is authorised and regulated by the FCA (FRN: 1053404) for regulated claims management activities only.

Mango shop, retail chain with trendy women's clothing and accessories.

Quick & simple

Register your interest

Stay informed

Get justice

Overview

A cyber incident has hit global fashion retailer Mango, after hackers breached one of its external marketing suppliers. The company began notifying customers on 15 October 2025, confirming that personal contact details — including names, postcodes, phone numbers and emails — may have been exposed.  

No payment or password data was involved, but the breach serves as another warning that data responsibility doesn’t stop at the supplier’s door. 

Experts say the attack highlights a growing problem in the retail sector, where smaller vendors with weaker defences are often targeted to reach bigger brands. If Mango failed to protect your personal information, you could be eligible to join a data breach claim. 

We are monitoring the situation closely. Register your interest today and we will keep you updated if one of our regulated UK partner law firms is able to take this claim forward. 

Mango data breach – At a glance  

Status

Stay Informed

Data stolen

Names, countries, postcodes, emails, phone numbers

Warning

Scammers may exploit leaked data for phishing or extortion.

Why register with Join the Claim?  

Join the Claim is bringing people together — uniting those who want answers, accountability and stronger data protections from the companies they trust. 

Staying informed is the first step towards change. By registering alongside others affected, you’re showing that people expect better.  

And that when something goes wrong, they want to see it put right

What do we know about the Mango data breach 

  • The breach originated at a third-party supplier outside Mango’s core IT systems but involved data used for marketing communications. 
  • Businesses remain responsible for safeguarding personal data, even when processing is outsourced. 
  • Customers should be alert to phishing emails or scam messages that could further use exposed details. 
  • Investigations are underway to determine how the breach occurred and whether Mango met its GDPR obligations. 

How Join the Claim works

Quick survey

Take a moment to answer a few simple questions so we can understand your connection and keep you updated.

Register interest

Share your details so we can keep you informed if any updates become available.

Join a claim

If a partner law firm takes this claim forward, we’ll let you know the next steps and how to join.

Latest updates on the Mango data breach

  • 16 October 2025

    Mango issues a public statement issued confirming the nature and scope of the data exposed. 

  • 15 October 2025

    Mango began contacting affected customers after confirming the breach. 

  • March-September 2025

    Attackers reportedly gained access to a third-party marketing database used by Mango. 

We’ll provide more updates on the data breach claim as they occur. 

Join the claim
Join the claim

Are you affected by the Mango data breach?

Mango is contacting all affected customers to let them know. Register to stay updated and we’ll let you know if a partner law firm takes this claim forward. 

Frequently asked questions about the Mango data breach

No. Mango confirmed that financial data and login details were not involved in this breach. Only marketing-related contact data was exposed.

The incident occurred through a third-party marketing supplier used by Mango. Attackers gained unauthorised access to their system, not Mango’s own servers.

Check for any suspicious emails, texts, or calls claiming to be from Mango or another retailer. Avoid clicking on links or sharing personal details unless you are certain of the source.

At this stage, Mango has not confirmed any compensation process. If regulatory findings determine that data protection duties were breached, affected individuals may have the right to seek compensation through a regulated UK law firm.

Our role is to keep people informed about potential group actions if one of our regulated UK partner law firms is able to take this claim forward.

By registering, you’ll stay up to date with any developments — from investigations to possible legal action.  

No. Registering simply means you’ll receive updates. If a law firm later takes on the case, you’ll be given the option to learn more about the process and any potential costs before deciding whether to take part. 

A group action claim allows people affected by the same issue to take action together. This strength in numbers helps stand up to big organisations. Join the Claim helps connect people with law firms so these actions have a real impact. 

Rated Excellent


on REVIEWS.io

Rated Excellent on REVIEWS.io

Join the claim
Clifford
Very easy to sign up, hope its sorted soon
Susan
Very easy and quick to complete the claim Everything was explained well and fees payable in etc were made very clear
Peter
So easy to sign up for the claim

Latest news