Retail data breaches expose customer payment card information, loyalty program personal details, online account credentials, and employee records at stores, restaurants, and e-commerce companies. These exposures commonly lead to financial fraud, card-not-present fraud used for online purchases, and identity theft affecting both shoppers and staff, since retail breaches often involve point-of-sale systems, e-commerce checkout pages, or loyalty program databases containing large volumes of customer data. A single breach at a retail chain or its payment processor can affect millions of customers across many store locations at once, given how centralized modern retail payment and loyalty systems tend to be. Employees of breached retailers can also be affected separately, since payroll and HR systems are frequently stored alongside customer-facing systems. This page tracks confirmed data breaches at retail and e-commerce companies, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect their payment information and identity.
Eyemart Express, LLC notified regulators of a data breach that exposed customer personal information, prompting formal filings with state attorneys general and renewed concerns about identity theft.
Eyemart Express Data Breach Exposes Customer Personal Information Read More »
An extortion group published stolen data from nearly 13 million Carhartt accounts after the workwear giant refused to pay a ransom, exposing customer and employee contact information.
Carhartt Data Breach Exposes Customer and Employee Contact Information Read More »
ASOS US Sales LLC notified regulators of a data breach involving financial account codes and credit and debit card information, raising fraud risks for affected shoppers.
ASOS US Sales LLC Data Breach Exposes Financial Account Codes and Card Information Read More »
ShipMonk, a shipping and order fulfillment provider, suffered a data breach exposing customer names, shipping addresses, phone numbers, and email addresses across multiple countries.
ShipMonk Data Breach Exposes Customer Names and Contact Information Read More »
See’s Candies, Inc. has notified California regulators that hackers accessed its network in April 2026, copying files that later surfaced on the dark web before the company disclosed the incident in August 2026.
See’s Candies Data Breach Exposes Names and Personal Information Read More »
A cyberattack on Trezor’s shipping partner ShipMonk exposed the names, addresses, emails, and phone numbers of nearly 14,000 Trezor customers.
Trezor Data Breach Exposes Names, Addresses, and Phone Numbers Read More »
Retail Services WIS Corporation notified the Vermont Attorney General that a data breach compromised Social Security numbers, putting affected individuals at risk of identity theft.
Retail Services WIS Corporation Data Breach Exposes Social Security Numbers Read More »
7-Eleven, Inc. notified the Vermont Attorney General of a data breach that exposed Social Security numbers, raising identity theft risks for affected individuals.
7-Eleven Data Breach Exposes Social Security Numbers Read More »
VacPartsWarehouse.com LLC notified the Vermont Attorney General of a data breach that exposed customers’ financial account codes and credit and debit card information.
VacPartsWarehouse.com LLC Data Breach Exposes Financial Account and Card Information Read More »
Homestead Gardens, Inc. notified the Vermont Attorney General of a data breach that exposed Social Security numbers, putting affected individuals at risk of identity theft.
Homestead Gardens Data Breach Exposes Social Security Numbers Read More »