Retail data breaches expose customer payment card information, loyalty program personal details, online account credentials, and employee records at stores, restaurants, and e-commerce companies. These exposures commonly lead to financial fraud, card-not-present fraud used for online purchases, and identity theft affecting both shoppers and staff, since retail breaches often involve point-of-sale systems, e-commerce checkout pages, or loyalty program databases containing large volumes of customer data. A single breach at a retail chain or its payment processor can affect millions of customers across many store locations at once, given how centralized modern retail payment and loyalty systems tend to be. Employees of breached retailers can also be affected separately, since payroll and HR systems are frequently stored alongside customer-facing systems. This page tracks confirmed data breaches at retail and e-commerce companies, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect their payment information and identity.
Informa Canada Inc., operator of Shop FAN EXPO, notified the Vermont Attorney General of a data breach involving financial account codes and credit and debit card information.
Shop FAN EXPO Data Breach Exposes Financial Account and Credit Card Information Read More »
High Mowing Organic Seeds notified the Vermont Attorney General of a data breach that exposed customers’ financial account codes and credit and debit card information.
High Mowing Organic Seeds Data Breach Exposes Financial Account and Card Information Read More »
Victra, the largest Verizon authorized retailer, notified the Vermont Attorney General of a data breach exposing customers’ Social Security numbers, financial account codes, and credit or debit account information.
Victra Data Breach Exposes Social Security Numbers and Financial Account Information Read More »
The Estee Lauder Companies notified the Vermont Attorney General of a data breach exposing Social Security numbers, financial account details, government ID numbers, and health records.
Port Harbor Marine notified the Vermont Attorney General of a data breach that exposed customers’ Social Security numbers, raising identity theft risks for those affected.
Port Harbor Marine Data Breach Exposes Social Security Numbers Read More »
Levi Strauss & Co. disclosed to the SEC that hackers used social engineering against three employees to steal corporate data from company computers, though it says consumer data was not affected.
Levi Strauss & Co. Data Breach Exposes Corporate Employee Data Read More »
Lehigh Valley Restaurant Brands, operator of Red Robin and Wingstop locations across eastern Pennsylvania, has notified individuals that unauthorized access to its systems may have exposed their personal information.
Lehigh Valley Restaurant Brands Data Breach Exposes Personal Information Read More »
Malin + Goetz, Inc. has notified customers that a May 2026 security incident exposed financial account codes, credit card numbers, and debit card details.
Malin + Goetz Data Breach Exposes Payment Card Information Read More »
The Bernard Group, a Minnesota-based retail merchandising firm, notified individuals that their personal information may have been compromised in a data security event, prompting free credit monitoring through Experian.
The Bernard Group Data Breach Exposes Personal Information Read More »
Chick-fil-A is notifying customers that a credential stuffing attack in June 2026 gave unauthorized parties access to Chick-fil-A One account details, including payment and membership information.
Chick-fil-A Data Breach Exposes Membership Numbers and Payment Card Details Read More »