The European DIY and gardening giant ManoMano is investigating a massive data breach after a threat actor claimed to have stolen a database containing records for 38 million customers. 

Incident Highlights

• The Breach: A hacker known as “Malkovich” posted the alleged database for sale on a popular cybercrime forum.
• Data Involved: The leaked information reportedly includes full names, email addresses, phone numbers, physical addresses, and hashed passwords.
• Geographic Reach: The breach impacts customers across ManoMano’s core European markets, including France, Italy, Spain, Germany, and the UK.
• Company Response: ManoMano has acknowledged the claims and stated they are conducting a forensic investigation to verify the authenticity of the data. They have emphasized that payment information is not stored on their servers and remains unaffected. 

Recommended Actions for Users

1. Change Passwords: Update your credentials on the ManoMano website and any other accounts where you reused the same password.
2. Monitor Phishing: Be wary of unsolicited emails or SMS messages, as hackers often use leaked contact info for targeted social engineering attacks.
3. Check HaveIBeenPwned: You can verify if your email was included in this or other breaches via the Have I Been Pwned database.