Every public data breach

44 disclosed this week · 26,355 on record

Halloween Spot

Disclosed Mar 16, 202010,653 accountsUnverified

In September 2019, the Halloween costume store The Halloween Spot suffered a data breach. Originally misattributed to fancy dress store Smiffys , the breach contained 13GB of data with over 10k unique email addresses alongside names, physical and IP addresses, phone numbers and order histories. The Halloween Spot advised customers the breach was traced back to "an old shipping information database".

What is known

People affected10,653 (accounts in the leaked data, per Have I Been Pwned)
DisclosedMar 16, 2020
HappenedSep 27, 2019
AttackNot stated
Data exposedEmailsIP addressesNamesPhone numbersAddressesFinancial
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Notices filed

History of this record
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Halloween Spot