Hibbett Retail
Disclosed Sep 8, 20262 weeks ago109,732 affectedConfirmed
What is known
| People affected | 109,732 (as reported by the organization) |
|---|---|
| Disclosed | Sep 8, 2026 |
| Discovered | Apr 27, 2026 |
| Happened | Apr 22, 2026 |
| Attack | Hacking |
| Data exposed | Social Security numbers, Government IDs, Health, Insurance, Payment cards, Financial, Dates of birth, Addresses, Names |
| Sector | Retail · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Hibbett Retailoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Hibbett Retailatg.wa.gov · Official notice | Official notice |
| Texas Attorney General data security breach report BR-0005316: Hibbett Retailoag.my.site.com · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Sep 8 | |
| Washington AGresidents of WA | Sep 8 | 510 |
| Texas AGresidents of TX | Sep 9 | 15,223 |
History of this record
- 2026-09-25 · data_types: [] to ["ssn","government-id","health","insurance","payment-card","financial","dob","addresses","names"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 109732 · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · discovered: empty to 2026-04-27 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.