HUT American Group

Disclosed Aug 20, 2026135,007 affectedConfirmed

What is known

People affected	135,007 (as reported by the organization)
Disclosed	Aug 20, 2026
Discovered	Apr 9, 2026
Happened	Apr 8, 2026
Attack	Not stated
Data exposed	Social Security numbersGovernment IDsHealthInsurancePayment cardsFinancialDates of birthAddressesNamesBiometrics
Sector	Retail · US
Status	Confirmed

Sources

Official noticejustice.oregon.gov

Oregon DOJ breach notice: HUT American Group

Official noticeoag.my.site.com

Texas Attorney General data security breach report BR-0005275: HUT American Group

Official noticeattorneygeneral.delaware.gov

Notice letter filed with the Delaware DOJ: HUT American Group

Official noticein.gov

Indiana Attorney General 2026 data breach report: HUT American Group

Notices filed

Residents of ORAug 20

Oregon DOJ135,007 people

Residents of DEAug 20

Delaware DOJ735 people

Residents of INAug 20

Indiana AG462 people

Residents of TXAug 21

Texas AG3,528 people

History of this record

source2026-10-02

empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-October-Year-to-Date-Report-2026.pdfby dailySource

data_types2026-10-02

["ssn","government-id","health","insurance","payment-card","financial","dob","addresses"] to ["ssn","government-id","health","insurance","payment-card","financial","dob","addresses","names","biometrics"]by dailySource

sector2026-09-25

other to retailby backfillSource

data_types2026-09-25

[] to ["ssn","government-id","health","insurance","payment-card","financial","dob","addresses"]by backfillSource

records_basis2026-09-25

empty to organizationby backfillSource

records2026-09-25

empty to 135007by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Oregon DOJ), confirmed by Oregon DOJ. Record counts are as reported. Not legal advice.

Everything about HUT American Group