Rug & Home was listed by the Rhysida ransomware group on September 7, 2026, according to the ransomware tracking source provided. The source described a database containing information for 50,193 customers and approximately 10,800 scans of signed delivery notes. The supplied research identifies the event as a reported ransomware incident and does not include an official company statement or regulator filing.
The reported information includes full names, home addresses, email addresses, phone numbers, purchase amounts, signed delivery notes, and plaintext passwords for approximately 60 accounts. The source does not report Social Security numbers, bank or payment-card information, clinical medical information, or health insurance data. Consumer notification, regulator notification, and any later changes to the reported scope have not been disclosed in the supplied sources.