Pandora Confirms Data Breach: Customer Names and Emails Stolen
Global jewellery giant Pandora has admitted hackers swiped customer data through a third-party platform. The Danish brand warned users to watch out for phishing scams after names and email addresses were exposed.
Data Breach Details: What Happened?
On Tuesday, Pandora sent emails to alert customers about the breach. While the company didn’t name the third-party culprit, it revealed the hack didn’t involve passwords, payment info, or sensitive financial data.
The stolen info was described as “very common types of data” — mainly names and emails, not credit cards or passwords.
Attack Stopped, But Phishing Risk Remains
Pandora says it has contained the attack and boosted security, but experts warn the stolen data could still be exploited.
Sources suspect a third-party email provider, similar to well-known breaches at SendGrid or MailChimp, may be involved.
Not Ransomware… Yet
So far, Pandora says there’s “no evidence” the data has been leaked or sold. But cybersecurity guru Dr Darren Williams, CEO of BlackFog, warns hackers are using stealthy methods to harvest data quietly.
“Attackers are quietly harvesting sensitive information to fuel extortion, identity fraud, and dark web selling,” Williams said. “Damage often goes on long after the breach.”
High-Profile Retailers Targeted
Pandora joins a growing list of UK retailers hit by cybercrime. Big names like Marks & Spencer, Harrods, and Co-op have suffered recent breaches, raising serious questions about retail cybersecurity.
July’s M&S hacking reportedly cost the company around £300 million in losses. Police have arrested four suspects linked to a hacking group behind attacks on M&S, Harrods, and Co-op.
Pandora Warns Customers: Stay Alert
In its warning email, Pandora urged shoppers to stay sharp:
“As a precautionary measure, we recommend paying extra attention to unusual emails or online activities that prompt for your personal data, as these could be phishing attempts pretending to be associated with Pandora.”
Customers are advised not to click suspicious links or download unexpected attachments.
