Retail data breaches expose customer payment card information, loyalty program personal details, online account credentials, and employee records at stores, restaurants, and e-commerce companies. These exposures commonly lead to financial fraud, card-not-present fraud used for online purchases, and identity theft affecting both shoppers and staff, since retail breaches often involve point-of-sale systems, e-commerce checkout pages, or loyalty program databases containing large volumes of customer data. A single breach at a retail chain or its payment processor can affect millions of customers across many store locations at once, given how centralized modern retail payment and loyalty systems tend to be. Employees of breached retailers can also be affected separately, since payroll and HR systems are frequently stored alongside customer-facing systems. This page tracks confirmed data breaches at retail and e-commerce companies, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect their payment information and identity.
A ransomware group has claimed responsibility for a data breach at Four Hands LLC, a global home furnishings wholesaler. The company has not publicly confirmed the incident or detailed what information was taken.
Four Hands LLC Data Breach Exposes Sensitive Business and Personal Data Read More »
A ransomware group has claimed responsibility for a cyberattack on outdoor gear maker Grundens, alleging it stole company and customer data. Grundens has not publicly confirmed the incident.
Grundens Data Breach Exposes Customer and Business Data Read More »
Covercraft Industries, LLC notified the Vermont Attorney General of a data breach involving financial account codes and credit and debit card information. Here is what affected individuals need to know.
Virgo Gems, LLC notified the Vermont Attorney General of a data breach involving financial account codes and credit and debit card information. Here is what affected individuals need to know.
Virgo Gems, LLC Data Breach Exposes Financial Account Codes and Credit Card Information Read More »
McKenzie Creative Brands notified regulators that a cybersecurity incident, determined in September 2026, may have exposed customers’ personal information, though specific data categories have not been made public.
McKenzie Creative Brands Data Breach Exposes Customer Personal Information Read More »
ViewSonic Corporation has sent notification letters warning that an incident may have exposed customer names along with credit or debit card numbers, security codes, and expiration dates.
ViewSonic Corporation Data Breach Exposes Credit and Debit Card Information Read More »
A threat actor group has claimed responsibility for a data breach involving Owens Distributors, an industrial machinery and equipment services provider. The incident reportedly involved unauthorized access to company systems.
Owens Distributors Data Breach Exposes Sensitive Business and Personal Records Read More »
A ransomware group has claimed responsibility for a data breach at Kellys Home Center, a retailer of home appliances, mattresses, and furniture. The extent of exposed personal information remains under review.
Kellys Home Center Data Breach Exposes Customer and Employee Personal Information Read More »
Harbor Fish Market notified the Vermont Attorney General of a data breach involving financial account codes and credit and debit card information. Here is what affected customers need to know.
Harbor Fish Market Data Breach Exposes Financial Account Codes and Card Information Read More »
Azure Farms, Inc., d/b/a Azure Standard notified regulators of a data breach involving financial account codes and credit and debit card information. Here is what affected customers need to know.
Azure Standard Data Breach Exposes Financial Account and Card Data Read More »