Miinto Confirms Data Breach Exposing Customer Order Information Danish e-commerce platform Miinto has notified customers of a security incident in which an unauthorized party accessed its internal order management system. The breach, disclosed via email this week, may have exposed personal data tied to customer purchases, though the company has not revealed the full scale of the compromise or the attack vector. According to the notification, the exposed data includes names, email and physical addresses, phone numbers, and payment method details such as card type (e.g., Visa, Mastercard) or pay-later services like Klarna. However, full card numbers and verification codes were not accessed. Miinto warned customers to remain vigilant against phishing attempts, as attackers could use the stolen data to craft convincing fraudulent messages. The company stated it has contained the breach, removed the intruder from its systems, and enhanced security measures, including stricter access controls for its order management system. Miinto also reported the incident to law enforcement and data protection authorities but has not issued a public statement or responded to media inquiries. Founded in 2009, Miinto operates in 14 countries and reported an 86% revenue increase in January, reaching 869 million kr ($132.9 million) in annual earnings. The breach underscores the risks faced by online marketplaces handling sensitive customer data.