Lovesac
Disclosed Sep 4, 20242 years agoConfirmed
Lovesac confirms breach after RansomHub attack claim
Furniture maker Lovesac said hackers accessed internal systems between February 12 and March 3, 2025 and stole data; RansomHub had claimed an attack on the company in March.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Sep 4, 2024 |
| Attack | Ransomware |
| Data exposed | Names, Other |
| Sector | Retail · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Vermont AG: The LoveSac Company data breach noticeago.vermont.gov · Regulator | Regulator |
| Lovesac confirms data breach after ransomware attack claimsbleepingcomputer.com · News | News |
| Vermont Attorney General: 2024-09-04 The LoveSac Company Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Vermont Attorney General: 2025-09-04 The LoveSac Company Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Vermont AGresidents of VT | Sep 4, 2024 | |
| Researchtotal | Sep 4, 2025 | |
| Vermont AGresidents of VT | Sep 4, 2025 |
Other breaches at Lovesac
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Disclosed Sep 4, 2025Sep 4, 20251 year ago | Sep 4, 20251 year ago | Not stated | Retail | Confirmed | 2,299 |
| Disclosed Aug 30, 2023Aug 30, 20233 years ago | Aug 30, 20233 years ago | Not stated | Retail | Confirmed | 208 |
History of this record
- 2026-09-25 · disclosed: 2025-09-04 to 2024-09-04 · backfill source
- 2026-09-25 · source_type: press to official · backfill source
- 2026-09-25 · source_url: https://www.bleepingcomputer.com/news/security/lovesac-confirms-data-breach-after-ransomware-attack-claims/ to https://ago.vermont.gov/document/2025-09-04-lovesac-company-data-breach-notice-consumers · backfill source
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.