Spanish fashion retail group Tendam suffered a severe cyber attack in September 2024, where cybercriminals gained unauthorized access to over 720 GB of sensitive data, potentially including compromised customer information. The attackers demanded an €800,000 ransom to prevent the leaked data from being published. The breach not only risked exposing personal and transactional details of customers but also posed significant financial and reputational threats to the company. While the exact scope of the stolen data (e.g., payment details, identities) was not fully disclosed, the sheer volume (720 GB) suggests a large-scale compromise of customer records, aligning with patterns where ransomware groups exfiltrate data before encryption to maximize leverage. The attack disrupted operations, eroded trust, and forced Tendam into a high-stakes negotiation with cybercriminals, reflecting the escalating sophistication of threats targeting retail sectors with rich consumer databases.