Investigation into a possible data breach relating to Leroy Merlin’s Hogami

In late June 2026, Leroy Merlin Spain announced that it was investigating a security incident relating to Hogami, its platform for installation, maintenance and renovation services. The available information places the incident around 30 June 2026, at which point the company activated its internal procedures after detecting the possible exposure of customer data. The case forms part of a recent cybersecurity incident, the existence of which was acknowledged by the company as part of its containment and analysis efforts.

According to the information released, the suspected data breach is believed to have affected certain customer records linked to Hogami, including identifying and contact details such as first name and surname, email address, telephone number, national identity number and postal address, as well as some technical identifiers. The company stated that no passwords, login credentials, bank details or payment information were compromised. Upon detecting the incident, Leroy Merlin Spain activated its security and data protection protocols, implemented containment, reinforcement and monitoring measures, informed those affected via its official channels and referred the matter to the relevant authorities.

At present, the situation continues to be publicly described as an ongoing investigation into a possible data breach. The company’s stated position is that the incident has been identified, that response measures have already been put in place, and that those affected and the authorities have already been notified.