ManoMano Data Breach: Customer Support Subcontractor Targeted in January 2026 Cyberattack French DIY e-commerce giant ManoMano has disclosed a data breach affecting customers who interacted with its support service. The incident, traced to a cyberattack on a third-party subcontractor in January 2026, resulted in the theft of personal data, though financial and login credentials remain secure. ### What Happened? Hackers compromised a subcontractor managing ManoMano’s customer support, gaining unauthorized access to records of clients who had contacted the service. The stolen data includes: - Names - Email addresses - Phone numbers - Conversation histories Critically, passwords and banking details were not exposed, as ManoMano does not store such information with the subcontractor. ### Response & Mitigation Upon detecting the breach, ManoMano’s cybersecurity team disabled the compromised account and launched an internal investigation to assess the scope of the incident. The company has notified: - CNIL (France’s data protection authority) - ANSSI (National Cybersecurity Agency) - Urgence Cyber Île-de-France (regional cybersecurity response platform) ManoMano has also set up a dedicated helpline (+33(1) 87 52 80 89) for affected customers and warned of potential phishing attempts, as attackers may use the stolen data to craft convincing scams via email, SMS, or phone calls. ### Impact & Risks While no immediate financial fraud has been reported, the breach heightens the risk of social engineering attacks, with cybercriminals leveraging the stolen details to impersonate ManoMano or its partners. Customers are advised to verify sender addresses before engaging with communications and avoid sharing sensitive information without confirmation of legitimacy. The incident underscores the supply chain vulnerabilities in cybersecurity, as attackers increasingly target third-party vendors to bypass primary defenses. ManoMano continues to reinforce security measures across its subcontractor network to prevent future breaches.