Retail data breaches expose customer payment card information, loyalty program personal details, online account credentials, and employee records at stores, restaurants, and e-commerce companies. These exposures commonly lead to financial fraud, card-not-present fraud used for online purchases, and identity theft affecting both shoppers and staff, since retail breaches often involve point-of-sale systems, e-commerce checkout pages, or loyalty program databases containing large volumes of customer data. A single breach at a retail chain or its payment processor can affect millions of customers across many store locations at once, given how centralized modern retail payment and loyalty systems tend to be. Employees of breached retailers can also be affected separately, since payroll and HR systems are frequently stored alongside customer-facing systems. This page tracks confirmed data breaches at retail and e-commerce companies, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect their payment information and identity.
Port Harbor Marine notified the Vermont Attorney General of a data breach that exposed customers’ Social Security numbers, raising identity theft risks for those affected.
Port Harbor Marine Data Breach Exposes Social Security Numbers Read More »
Levi Strauss & Co. disclosed to the SEC that hackers used social engineering against three employees to steal corporate data from company computers, though it says consumer data was not affected.
Levi Strauss & Co. Data Breach Exposes Corporate Employee Data Read More »
Chick-fil-A, Inc. notified the Vermont Attorney General of a data breach involving financial account codes and credit and debit account information tied to affected customers.
Chick-fil-A Data Breach Exposes Financial Account and Debit Card Information Read More »
Lehigh Valley Restaurant Brands, operator of Red Robin and Wingstop locations across eastern Pennsylvania, has notified individuals that unauthorized access to its systems may have exposed their personal information.
Lehigh Valley Restaurant Brands Data Breach Exposes Personal Information Read More »
Malin + Goetz, Inc. has notified customers that a May 2026 security incident exposed financial account codes, credit card numbers, and debit card details.
Malin + Goetz Data Breach Exposes Payment Card Information Read More »
The Bernard Group, a Minnesota-based retail merchandising firm, notified individuals that their personal information may have been compromised in a data security event, prompting free credit monitoring through Experian.
The Bernard Group Data Breach Exposes Personal Information Read More »
Chick-fil-A is notifying customers that a credential stuffing attack in June 2026 gave unauthorized parties access to Chick-fil-A One account details, including payment and membership information.
Chick-fil-A Data Breach Exposes Membership Numbers and Payment Card Details Read More »
Under Armour is investigating a claimed data breach by the Everest ransomware group, which alleges it stole 343 GB of personal data affecting up to 72 million individuals.
Under Armour Data Breach Exposes Personal Data of 72 Million Customers Read More »
A ransomware attack by the Sinobi group hit Cohen’s Fashion Optical, exposing Social Security numbers, financial records, and internal documents belonging to consumers.
7-Eleven confirmed a data breach after an unauthorized party accessed systems storing franchisee application documents, exposing names, Social Security numbers, driver’s licenses and addresses.
7-Eleven Data Breach Exposes Social Security Numbers and Driver’s Licenses Read More »