Every public data breach

Disclosed this week44On record26,355

44 disclosed this week · 26,355 on record

Kroger

Disclosed Jun 18, 20201,474,284 affectedConfirmed

Official notice

Accellion FTA breach exposes Kroger associate and pharmacy customer data

Kroger confirmed it was impacted by the Accellion data security incident affecting its third-party secure file transfer service, involving data of some associates and a limited number of customers.

What is known

People affected1,474,284 (as reported to HHS)
DisclosedJun 18, 2020
DiscoveredJan 23, 2021
HappenedDec 24, 2020
AttackSupply chain
Data exposedNamesSocial Security numbersHealthEmploymentFinancial
SectorRetail · US
StatusConfirmed
Part ofAccellion (2021)

Sources

Official noticeoag.ca.gov
California Attorney General breach notice: Kroger
Official noticeatg.wa.gov
Washington Attorney General breach notice: Kroger
The organizationweb.archive.org
Accellion Security Incident Impacts Kroger Family of Companies Associates and Limited Number of Customers
Newswired.com
The Accellion Breach Keeps Getting Worse, and More Expensive
Official noticein.gov
Indiana Attorney General 2021 data breach report: Kroger
Official noticeocrportal.hhs.gov
HHS OCR breach report (archive, resolved): Kroger (Healthcare Provider, OH)

Notices filed

TotalJun 18, 2020
HHS archive132,258 people
Residents of CAFeb 19, 2021
California AGCount not stated
Residents of WAFeb 19, 2021
Washington AG153,800 people
TotalFeb 19, 2021
ResearchCount not stated
Residents of INFeb 19, 2021
Indiana AG208,100 people
TotalFeb 19, 2021
HHS archive1,474,284 people
TotalNov 12, 2021
HHS archive2,686 people

Same campaign

QualysSupply chain exposed internal documents.Supply chainTechUSMar 4, 2021SingtelSupply chain exposed names, government IDs and phone numbers.Supply chainTelecomSGUnverifiedFeb 11, 2021AccellionZero-day attacks on legacy FTA file transfer appliance hit dozens of organizationsSupply chainTechUSFeb 1, 2021Australian Securities and Investments CommissionASIC server breached through Accellion file transfer softwareSupply chainGovernmentAUUnverifiedJan 25, 2021Reserve Bank of New ZealandFiles illegally downloaded from central bank's Accellion file sharing systemSupply chainGovernmentNZUnverifiedJan 10, 2021

Other breaches at Kroger

Breach, details not statedExposed names, Social Security numbers and addresses. Reported to the Indiana AG.13K affectedTechUSMay 16, 2016
History of this record
disclosed2026-09-25
2021-02-19 to 2020-06-18by backfillSource
records_basis2026-09-25
organization to hhsby backfillSource
records2026-09-25
1040000 to 1474284by backfillSource
source2026-09-25
empty to https://ocrportal.hhs.gov/ocr/breach/breach_report.jsfby backfillSource
records_basis2026-09-25
empty to organizationby backfillSource
records2026-09-25
empty to 1040000by backfillSource
campaign2026-09-25
empty to accellion-2021by seedSource
sector2026-09-25
tech to retailby seedSource
attack2026-09-25
hacking to supply-chainby seedSource
data_types2026-09-25
[] to ["names","ssn","health","employment","financial"]by seedSource
summary2026-09-25
empty to Kroger confirmed it was impacted by the Accellion data security incident affecting its third-party secure file transfer service, involving data of some associates and a limited number of customers.by seedSource
title2026-09-25
empty to Accellion FTA breach exposes Kroger associate and pharmacy customer databy seedSource
attack2026-09-25
unknown to hackingby backfillSource
discovered2026-09-25
empty to 2021-01-23by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Kroger