Retail data breaches expose customer payment card information, loyalty program personal details, online account credentials, and employee records at stores, restaurants, and e-commerce companies. These exposures commonly lead to financial fraud, card-not-present fraud used for online purchases, and identity theft affecting both shoppers and staff, since retail breaches often involve point-of-sale systems, e-commerce checkout pages, or loyalty program databases containing large volumes of customer data. A single breach at a retail chain or its payment processor can affect millions of customers across many store locations at once, given how centralized modern retail payment and loyalty systems tend to be. Employees of breached retailers can also be affected separately, since payroll and HR systems are frequently stored alongside customer-facing systems. This page tracks confirmed data breaches at retail and e-commerce companies, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect their payment information and identity.
A threat actor group has claimed responsibility for a data breach involving Owens Distributors, an industrial machinery and equipment services provider. The incident reportedly involved unauthorized access to company systems.
Owens Distributors Data Breach Exposes Sensitive Business and Personal Records Read More »
A ransomware group has claimed responsibility for a data breach at Kellys Home Center, a retailer of home appliances, mattresses, and furniture. The extent of exposed personal information remains under review.
Kellys Home Center Data Breach Exposes Customer and Employee Personal Information Read More »
Harbor Fish Market notified the Vermont Attorney General of a data breach involving financial account codes and credit and debit card information. Here is what affected customers need to know.
Harbor Fish Market Data Breach Exposes Financial Account Codes and Card Information Read More »
Azure Farms, Inc., d/b/a Azure Standard notified regulators of a data breach involving financial account codes and credit and debit card information. Here is what affected customers need to know.
Azure Standard Data Breach Exposes Financial Account and Card Data Read More »
A ransomware group has claimed responsibility for a cyberattack on Martin Lawrence Galleries, alleging theft of customer information from the fine art retailer.
Martin Lawrence Galleries Data Breach Exposes Customer Personal Information Read More »
Fanatics, the global sports commerce platform, suffered a data breach after attackers claimed to steal order files, financial records and customer tax documents, threatening to delete cloud data.
Fanatics Data Breach Exposes Order History and Financial Records Read More »
Powerhouse Retail Services notified the Vermont Attorney General that Social Security numbers were exposed in a recent data breach, prompting concerns over identity theft for affected individuals.
Powerhouse Retail Services Data Breach Exposes Social Security Numbers Read More »
SARKU Japan, a foreign-car service and parts network with US operations, suffered a ransomware attack claimed by a ransomware group, raising concerns about exposed customer and business data.
SARKU Japan Data Breach Exposes Customer and Business Records Read More »
An unknown party claims to have stolen customer data from Goose Creek Candle Company’s Shopify store, exposing millions of email addresses, names, phone numbers, physical addresses, and purchase details.
Goose Creek Candle Company Data Breach Exposes Names, Emails, and Physical Addresses Read More »
Hibbett Retail, Inc. has notified regulators of a data breach involving unauthorized access to personal information. Here is what customers and employees need to know about their exposure and next steps.
Hibbett Retail, Inc. Data Breach Exposes Personal and Financial Information Read More »