Retail data breaches expose customer payment card information, loyalty program personal details, online account credentials, and employee records at stores, restaurants, and e-commerce companies. These exposures commonly lead to financial fraud, card-not-present fraud used for online purchases, and identity theft affecting both shoppers and staff, since retail breaches often involve point-of-sale systems, e-commerce checkout pages, or loyalty program databases containing large volumes of customer data. A single breach at a retail chain or its payment processor can affect millions of customers across many store locations at once, given how centralized modern retail payment and loyalty systems tend to be. Employees of breached retailers can also be affected separately, since payroll and HR systems are frequently stored alongside customer-facing systems. This page tracks confirmed data breaches at retail and e-commerce companies, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect their payment information and identity.
Petco Animal Supplies Stores, Inc. notified regulators of a data breach involving government ID numbers, prompting questions about who was affected and what protective steps individuals should take.
Petco Animal Supplies Stores, Inc. Data Breach Exposes Government ID Numbers Read More »
Gardens Alive, Inc. suffered a ransomware attack in which a threat actor group claims to have stolen 2TB of data from the gardening company’s network. Here is what is known so far and what affected individuals should do next.
Gardens Alive, Inc. Data Breach Exposes Customer and Company Data Read More »
Hibbert Retail, Inc. notified regulators that Social Security numbers were exposed in a data breach, prompting concerns over identity theft for affected individuals.
Hibbert Retail, Inc. Data Breach Exposes Social Security Numbers Read More »
GT Distributors, a law enforcement equipment supplier, suffered a ransomware attack linked to the Play group that may have exposed sensitive personal information belonging to customers and employees.
GT Distributors Data Breach Exposes Customer and Employee Personal Information Read More »
Jinny Beauty Supply, a major Korean-American beauty wholesale distributor, suffered a ransomware attack that exposed customer credit card forms, employee tax records, and extensive company system credentials.
Jinny Beauty Supply Data Breach Exposes Credit Card Numbers and Social Security Numbers Read More »
Homewood Sales Corporation suffered a ransomware attack claimed by the DragonForce group, raising concerns that sensitive personal and business data may have been accessed or stolen.
Homewood Sales Corporation Data Breach Exposes Sensitive Company and Personal Data Read More »
ScrubaDub Auto Wash Centers confirmed a ransomware attack by the Akira group that exposed employee passport numbers, driver’s license numbers, and client contact and financial information.
Family Farm & Home notified the Vermont Attorney General that a data breach exposed Social Security numbers, prompting concerns about identity theft for those affected.
Family Farm & Home Data Breach Exposes Social Security Numbers Read More »
Sports Endeavors, the parent company of Soccer.com and WorldSoccerShop, suffered a ransomware attack claimed by the spacebears group, raising concerns about exposed customer data.
Sports Endeavors Data Breach Exposes Customer Personal Information Read More »
Eyemart Express, LLC notified regulators of a data breach that exposed customer personal information, prompting formal filings with state attorneys general and renewed concerns about identity theft.
Eyemart Express Data Breach Exposes Customer Personal Information Read More »