Retail data breaches expose customer payment card information, loyalty program personal details, online account credentials, and employee records at stores, restaurants, and e-commerce companies. These exposures commonly lead to financial fraud, card-not-present fraud used for online purchases, and identity theft affecting both shoppers and staff, since retail breaches often involve point-of-sale systems, e-commerce checkout pages, or loyalty program databases containing large volumes of customer data. A single breach at a retail chain or its payment processor can affect millions of customers across many store locations at once, given how centralized modern retail payment and loyalty systems tend to be. Employees of breached retailers can also be affected separately, since payroll and HR systems are frequently stored alongside customer-facing systems. This page tracks confirmed data breaches at retail and e-commerce companies, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect their payment information and identity.
A ransomware group has reportedly claimed responsibility for a data breach at Five Star Jewelers, a Miami retailer, though the company has not confirmed the incident.
Five Star Jewelers Data Breach Claim: Personal Information Reportedly Exposed Read More »
An extortion group claims to have stolen over a million LoveSac customer order records. The retailer has not confirmed the incident publicly.
LoveSac Data Breach Claim: Customer Order Records Reportedly Exposed Read More »
Nordace Limited notified Vermont regulators of a data breach involving financial account codes and credit and debit account information. Here is what affected customers need to know.
A ransomware group claims it stole corporate data from Cascade Flooring America, including employee and client records. The company has not confirmed the incident.
A ransomware group claims it accessed internal network and staff records tied to TheHomeMag NorCal, though the company has not confirmed the incident.
TheHomeMag NorCal Data Breach Claim: Staff and Infrastructure Records Reportedly Exposed Read More »
A ransomware group claims it accessed Froggys Fog’s order, shipping, and employee systems. The company has not confirmed the incident, and the full scope remains unclear.
Froggys Fog Data Breach Claim: Order and Shipping Database Reportedly Exposed Read More »
Ganxxet, Inc. notified Vermont regulators of a data breach that compromised financial account codes and credit and debit card information belonging to customers.
Ganxxet, Inc. Data Breach Exposes Financial Account Codes and Card Information Read More »
A ransomware group claims responsibility for a data breach at iHeartJane, a cannabis e-commerce marketplace, though the company has not confirmed the incident.
iHeartJane Data Breach Claim: Personal Information Reportedly Exposed Read More »
A ransomware group claims it accessed data tied to Verano Holdings, the cannabis retailer behind Zen Leaf and MÜV. Verano has not confirmed the incident.
Verano Holdings Data Breach Claim: Personal Information Reportedly Exposed Read More »
A ransomware group has claimed responsibility for an attack on Buckle, Inc., alleging that personal information may have been exposed. Buckle has not confirmed the incident.
Buckle, Inc. Data Breach Claim: Personal Information Reportedly Exposed Read More »