Retail data breaches expose customer payment card information, loyalty program personal details, online account credentials, and employee records at stores, restaurants, and e-commerce companies. These exposures commonly lead to financial fraud, card-not-present fraud used for online purchases, and identity theft affecting both shoppers and staff, since retail breaches often involve point-of-sale systems, e-commerce checkout pages, or loyalty program databases containing large volumes of customer data. A single breach at a retail chain or its payment processor can affect millions of customers across many store locations at once, given how centralized modern retail payment and loyalty systems tend to be. Employees of breached retailers can also be affected separately, since payroll and HR systems are frequently stored alongside customer-facing systems. This page tracks confirmed data breaches at retail and e-commerce companies, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect their payment information and identity.
JM Bullion, Inc. notified the California Attorney General of a data breach affecting its customers, though the exact details of what was exposed remain limited.
JM Bullion, Inc. Data Breach Exposes Personal Information Read More »
A ransomware group claims it accessed and leaked data from Pure Options, a Michigan cannabis operator, including staff passwords and financial records. PG Group has not publicly confirmed the incident.
A ransomware group claims it stole and leaked MarieBelle New York’s financial, vendor and telehealth-related records after the company allegedly refused to pay. MarieBelle has not publicly confirmed the incident.
MarieBelle New York Data Breach Claim: Financial and Clinical Records Reportedly Exposed Read More »
A ransomware group claims it compromised Claire’s Inc. customer and employee data in a cyberattack that reportedly disrupted the retailer’s operations. Claire’s Inc. has not publicly confirmed the incident.
Claire’s Inc. Data Breach Claim: Customer and Employee Records Reportedly Exposed Read More »
A ransomware group has claimed responsibility for a data breach at Four Hands LLC, a global home furnishings wholesaler. The company has not publicly confirmed the incident or detailed what information was taken.
Four Hands LLC Data Breach Exposes Sensitive Business and Personal Data Read More »
A ransomware group has claimed responsibility for a cyberattack on outdoor gear maker Grundens, alleging it stole company and customer data. Grundens has not publicly confirmed the incident.
Grundens Data Breach Exposes Customer and Business Data Read More »
Covercraft Industries, LLC notified the Vermont Attorney General of a data breach involving financial account codes and credit and debit card information. Here is what affected individuals need to know.
Virgo Gems, LLC notified the Vermont Attorney General of a data breach involving financial account codes and credit and debit card information. Here is what affected individuals need to know.
Virgo Gems, LLC Data Breach Exposes Financial Account Codes and Credit Card Information Read More »
McKenzie Creative Brands notified regulators that a cybersecurity incident, determined in September 2026, may have exposed customers’ personal information, though specific data categories have not been made public.
McKenzie Creative Brands Data Breach Exposes Customer Personal Information Read More »
ViewSonic Corporation has sent notification letters warning that an incident may have exposed customer names along with credit or debit card numbers, security codes, and expiration dates.
ViewSonic Corporation Data Breach Exposes Credit and Debit Card Information Read More »