Retail data breaches expose customer payment card information, loyalty program personal details, online account credentials, and employee records at stores, restaurants, and e-commerce companies. These exposures commonly lead to financial fraud, card-not-present fraud used for online purchases, and identity theft affecting both shoppers and staff, since retail breaches often involve point-of-sale systems, e-commerce checkout pages, or loyalty program databases containing large volumes of customer data. A single breach at a retail chain or its payment processor can affect millions of customers across many store locations at once, given how centralized modern retail payment and loyalty systems tend to be. Employees of breached retailers can also be affected separately, since payroll and HR systems are frequently stored alongside customer-facing systems. This page tracks confirmed data breaches at retail and e-commerce companies, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect their payment information and identity.
Fandango Media, LLC notified Vermont regulators of a data breach involving financial account codes and credit or debit account information. Here is what affected customers should know.
A ransomware group claims it stole internal files from Custom Floors Unlimited, a US flooring company, but the business has not publicly confirmed the incident.
A ransomware group claims to have stolen customer and financing records from Madison Honda, though the dealership has not publicly confirmed the incident.
Madison Honda Data Breach Claim: Financial and Loan Records Reportedly Exposed Read More »
A threat actor group claims it accessed and leaked massive volumes of Expedia Group loyalty, booking, and account data. Expedia Group has not confirmed the incident publicly.
A ransomware group claims it accessed internal Staples, Inc. records, including employee details and a pasted chat log listing Social Security numbers. Staples has not confirmed the incident.
A ransomware group claims it stole more than 100 GB of files from Custom Bakehouse, saying the data may have exposed personal information. The company has not confirmed the incident.
Custom Bakehouse Data Breach Claim: Personal Information Reportedly Exposed Read More »
A ransomware group claims it stole a large archive of AI shopping assistant chat logs and other records from Hallmark Cards, though the company has not confirmed the incident.
Hallmark Cards, Inc. Data Breach Claim: Customer Chat Data Reportedly Exposed Read More »
A ransomware group claims it stole hundreds of gigabytes of files and databases from Simplehuman. The company has not confirmed the incident, and the exposed data has not been publicly detailed.
Simplehuman Data Breach Claim: Personal Information Reportedly Exposed Read More »
A ransomware group claims it accessed customer chat logs, email addresses, and staff data from The Container Store, though the company has not confirmed the incident.
The Container Store Data Breach Claim: Customer Chat Logs and Emails Reportedly Exposed Read More »
Revolve Group, Inc. notified the Vermont Attorney General that a data breach exposed financial account codes along with credit and debit card account information.
Revolve Group, Inc. Data Breach Exposes Financial Account and Card Information Read More »