Miinto, a Danish online fashion marketplace, confirmed that an unauthorized party accessed its order management system, potentially exposing personal and payment data of some customers.

The breach was disclosed via email to affected customers, which The Register reviewed; the company did not issue a public statement and declined to comment to The Register. Miinto, founded in 2009 and operating in 14 countries, reported an 86 percent revenue increase to 869 million kr ($132.9 million) in January.

The email warned that names, email addresses, physical addresses, phone numbers and payment method information such as card type or Klarna usage may have been accessed. It stated that no card numbers or verification details were obtained. Miinto said it removed the intruder, enhanced access controls and reported the incident to police and the relevant data protection authority. The company cautioned customers about phishing attempts that could use the stolen information to impersonate the brand. No estimate of the number of affected customers was provided.

The incident highlights ongoing risks to e‑commerce platforms and the need for robust security controls.