Skip to content
Breaches.

Retail breaches

594 breaches, most recently disclosed first. The list grows as new ones are disclosed.

OrganizationAffected
Co-opHackers copy Co-op's 6.5 million member recordsApr 30, 20251 year agoHackingUnverified6.5M
Jildor ShoesApr 29, 20251 year agoUnknown
Cusanos Italian BakeryApr 29, 20251 year ago3,297
Marks & SpencerScattered Spider cyberattack on M&S steals customer data, halts online salesApr 22, 20251 year agoRansomwareUnverifiedUnknown
Ahold DelhaizeAhold Delhaize says November ransomware attack exposed 2.2M peopleApr 17, 20251 year agoRansomwareUnverified2.2M
Food for the PoorApr 4, 20251 year ago52K
Levi StraussMar 31, 20251 year ago217
Sam's ClubClop lists Sam's Club on leak site; retailer investigatesMar 28, 20251 year agoExtortionUnverifiedUnknown
Strauss BrandsMar 19, 20251 year ago4,336
Coast of Maine BrandsFeb 27, 20251 year ago30
GrubhubGrubhub breach via third-party support provider exposes users' dataFeb 3, 20251 year agoVendor breachUnverifiedUnknown
Mizuno USAMizuno USA says hackers copied files for two monthsJan 30, 20251 year agoHacking1,329
Furniture Mart USAJan 24, 20251 year ago9,718
Furniture MartJan 24, 20251 year agoUnknown
Avery ProductsCard skimmer on Avery website steals customers' payment dataJan 10, 20251 year agoHacking61K
Green Bay PackersCard skimmer on Packers Pro Shop site steals fans' card dataJan 6, 20251 year agoHacking8,514
MyGiftCardSupplyGift card store left customer ID documents exposed onlineJan 3, 20251 year agoExposed dataUnverifiedUnknown
StiiizyPoint-of-sale vendor hack exposes cannabis buyers' ID documentsDec 20, 20241 year agoVendor breachUnknown
Self Esteem BrandsDec 20, 20241 year ago2,430
International Coffee & TeaDec 19, 20241 year ago54K
Krispy KremeCyberattack on Krispy Kreme disrupts US online orderingDec 11, 20241 year agoHacking162K
Bob's Discount FurnitureDec 3, 20241 year ago5,222
Furman FoodsNov 18, 20241 year ago2,365
AmazonAmazon employee contact data leaked via property vendor's MOVEit breachNov 11, 20241 year agoVendor breachUnverifiedUnknown
Tricon EnergyNov 6, 20241 year ago503
Hot TopicHacker offers Hot Topic loyalty database after infostealer compromiseOct 23, 20241 year agoCredential stuffingUnverifiedUnknown
MIle HI FoodsOct 22, 20241 year ago6,210
Varsity BrandsOct 14, 20241 year agoRansomware66K
Menu Maker FoodsSep 9, 20242 years ago2,576
Retail DataSep 6, 20242 years agoUnknown
LovesacLovesac confirms breach after RansomHub attack claimSep 4, 20242 years agoRansomwareUnknown
Market MoveisSep 1, 20242 years agoUnverified28Kacct
DICK'S Sporting GoodsUnauthorized access to Dick's Sporting Goods systems holding confidential dataAug 28, 20242 years agoHackingUnknown
Peco FoodsJul 24, 20242 years ago48K
Rite AidImpersonation attack exposes Rite Aid customer ID data from 2017 to 2018 purchasesJul 15, 20242 years agoPhishing2.2M
Bassett Furniture IndustriesMaterial cybersecurity incident reported to the SEC (8-K Item 1.05)Jul 15, 20242 years agoUnknown
Advance StoresJul 10, 20242 years agoHacking2.3M
Crimson Wine GroupMaterial cybersecurity incident reported to the SEC (8-K Item 1.05)Jul 5, 20242 years agoRansomwareUnknown
FPL FoodJul 3, 20242 years ago16K
Market TimeJun 27, 20242 years ago92
Neiman MarcusNeiman Marcus customer data stolen in Snowflake-related attackJun 24, 20242 years agoCredential stuffingUnverified64K
Levi StraussJun 20, 20242 years agoHacking72K
Advance Auto PartsSnowflake-linked breach exposes data of 2.3 million applicants and employeesJun 14, 20242 years agoCredential stuffing2.3M
Carolina FoodsJun 7, 20242 years ago3,614
Bimbo Bakeries USAJun 6, 20242 years ago560
Christie'sRansomHub attack on Christie's exposes ID data of 45,798 clientsMay 28, 20242 years agoRansomware46K
Nissan North AmericaMay 14, 20242 years agoUnknown
Panda Restaurant GroupApr 30, 20242 years agoHackingUnknown
Lagunitas BrewingApr 26, 20242 years ago2,979
Giant TigerVendor breach exposes 2.8 million Giant Tiger customer recordsApr 12, 20242 years agoVendor breachUnverified2.8Macct

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.