El Corte Inglés

ElCorte Inglés is a retailer headquartered in Spain. The company has been identified by the alias El Corte Inglés in public reports. It suffered two cyberattacks in 2025, one on March 1 and another on November 1. Both incidents involved unauthorized access to an external provider's databases that resulted in the compromise of customer personal data.

In each breach, attackers obtained identifying information, contact details, and store or purchase card numbers, although the company stated the data could not be used for fraudulent transactions. The breaches were quickly detected and contained, and the retailer notified relevant authorities and affected individuals. El Corte Inglés emphasized that it will never request security codes or passwords via email or phone. The company also assured customers that its transaction processing remains secure and that ongoing operations were not impacted. These events highlight the retailer's exposure to third‑party risk and its response procedures for data‑security incidents. The retailer also noted that risks associated with the leak include identity theft, phishing, and potential sale of data on illegal markets, which could lead to spam and further cyberattacks.