Retail data breaches expose customer payment card information, loyalty program personal details, online account credentials, and employee records at stores, restaurants, and e-commerce companies. These exposures commonly lead to financial fraud, card-not-present fraud used for online purchases, and identity theft affecting both shoppers and staff, since retail breaches often involve point-of-sale systems, e-commerce checkout pages, or loyalty program databases containing large volumes of customer data. A single breach at a retail chain or its payment processor can affect millions of customers across many store locations at once, given how centralized modern retail payment and loyalty systems tend to be. Employees of breached retailers can also be affected separately, since payroll and HR systems are frequently stored alongside customer-facing systems. This page tracks confirmed data breaches at retail and e-commerce companies, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect their payment information and identity.
See’s Candies, Inc. has notified California regulators that hackers accessed its network in April 2026, copying files that later surfaced on the dark web before the company disclosed the incident in August 2026.
See’s Candies Data Breach Exposes Names and Personal Information Read More »
A cyberattack on Trezor’s shipping partner ShipMonk exposed the names, addresses, emails, and phone numbers of nearly 14,000 Trezor customers.
Trezor Data Breach Exposes Names, Addresses, and Phone Numbers Read More »
Retail Services WIS Corporation notified the Vermont Attorney General that a data breach compromised Social Security numbers, putting affected individuals at risk of identity theft.
Retail Services WIS Corporation Data Breach Exposes Social Security Numbers Read More »
7-Eleven, Inc. notified the Vermont Attorney General of a data breach that exposed Social Security numbers, raising identity theft risks for affected individuals.
7-Eleven Data Breach Exposes Social Security Numbers Read More »
VacPartsWarehouse.com LLC notified the Vermont Attorney General of a data breach that exposed customers’ financial account codes and credit and debit card information.
VacPartsWarehouse.com LLC Data Breach Exposes Financial Account and Card Information Read More »
Homestead Gardens, Inc. notified the Vermont Attorney General of a data breach that exposed Social Security numbers, putting affected individuals at risk of identity theft.
Homestead Gardens Data Breach Exposes Social Security Numbers Read More »
Informa Canada Inc., operator of Shop FAN EXPO, notified the Vermont Attorney General of a data breach involving financial account codes and credit and debit card information.
Shop FAN EXPO Data Breach Exposes Financial Account and Credit Card Information Read More »
High Mowing Organic Seeds notified the Vermont Attorney General of a data breach that exposed customers’ financial account codes and credit and debit card information.
High Mowing Organic Seeds Data Breach Exposes Financial Account and Card Information Read More »
Victra, the largest Verizon authorized retailer, notified the Vermont Attorney General of a data breach exposing customers’ Social Security numbers, financial account codes, and credit or debit account information.
Victra Data Breach Exposes Social Security Numbers and Financial Account Information Read More »
The Estee Lauder Companies notified the Vermont Attorney General of a data breach exposing Social Security numbers, financial account details, government ID numbers, and health records.