Hibbett Retail

Disclosed Sep 8, 2026109,732 affectedConfirmed

What is known

People affected	109,732 (as reported by the organization)
Disclosed	Sep 8, 2026
Discovered	Apr 27, 2026
Happened	Apr 22, 2026
Attack	Hacking
Data exposed	Social Security numbersGovernment IDsHealthInsurancePayment cardsFinancialDates of birthAddressesNames
Sector	Retail · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Hibbett Retail

Official noticeatg.wa.gov

Washington Attorney General breach notice: Hibbett Retail

Official noticeoag.my.site.com

Texas Attorney General data security breach report BR-0005316: Hibbett Retail

Official noticein.gov

Indiana Attorney General 2026 data breach report: Hibbett Retail

Notices filed

Residents of CASep 8

California AGCount not stated

Residents of WASep 8

Washington AG510 people

Residents of INSep 8

Indiana AG3,187 people

Residents of TXSep 9

Texas AG15,223 people

History of this record

source2026-10-02

empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-October-Year-to-Date-Report-2026.pdfby dailySource

data_types2026-09-25

[] to ["ssn","government-id","health","insurance","payment-card","financial","dob","addresses","names"]by backfillSource

records_basis2026-09-25

empty to organizationby backfillSource

records2026-09-25

empty to 109732by backfillSource

attack2026-09-25

unknown to hackingby backfillSource

discovered2026-09-25

empty to 2026-04-27by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Hibbett Retail