Retail Data Breaches

Harbor Fish Market reported a data breach affecting at least 13 Vermont residents in 2026, according to a breach page updated September 25. The specific data involved and breach date have not been publicly disclosed.

Azure Farms, Inc., doing business as Azure Standard, reported a data breach involving customers’ financial information to the Vermont Attorney General in 2026. The breach date and number of affected individuals have not been publicly disclosed.

A ransomware tracker reported a Martin Lawrence Galleries data breach in 2026, listing September 24 as the attack date. The incident has not been confirmed by the company or a regulator in the available sources.

Lake Beverage was listed in a reports-only 2026 data breach report by Ransomware.live. The Settra ransomware group reportedly targeted the Rochester, New York, beer distributor, but affected individuals and compromised data types have not been publicly confirmed.

Newman Tractor was listed in a reported 2026 data breach by RansomLook on September 21, 2026. The report has not been publicly confirmed by the company or a regulator, and affected individuals and data types remain unknown.

Fanatics was listed in a reports-only 2026 data breach claim by the N0n ransomware group. The report described 46,902 order files containing customer and financial information, but no affected-individual count or official confirmation has been disclosed.

Appliance Factory & Mattress Kingdom was listed in a reported 2026 data breach by the Incransom ransomware group. The report does not confirm the number of affected individuals or the types of information involved.

Natural Organics, Inc., associated with NaturesPlus, was listed in a reported 2026 data breach by the Settra ransomware group. The ransomware tracker report does not confirm the affected-person count or the types of personal information involved.

George Cameron Nash was listed in a reports-only 2026 data breach posting associated with the Akira ransomware group. The available report does not confirm affected individuals or the types of data involved.

Professional Retail Services was listed in a reported 2026 data breach involving alleged access to employee, client, owner, and corporate documents. The report came from ransomware tracker Ransomware.live and has not been officially confirmed by the company or a regulator.

Gardens Alive, Inc. was listed in a reported 2026 data breach by the Embargo ransomware group. Ransomware.live reported an alleged 2 TB data theft, but no company or regulator has confirmed the incident or disclosed affected individuals or data types.

Brome Bird Care Inc. was referenced in a Vermont-related breach tracker entry in September 2026. Official details regarding this incident have not been publicly confirmed.

GT Distributors was listed in a 2026 ransomware report as the alleged victim of a data breach attributed to the Play ransomware group. The report does not provide an affected count or identify the data involved, and no official confirmation was found.

Rug & Home was reportedly affected by a 2026 data breach attributed to the Rhysida ransomware group. The report states that customer names, addresses, contact details, purchase amounts, delivery notes, and approximately 60 plaintext passwords were exposed, but the incident has not been officially confirmed.

Ritz Safety was listed in a reports-only 2026 data breach attributed to the ransomware group The Gentlemen. The available report does not confirm the number of affected individuals or the types of data involved.

Jinny Beauty Supply was listed in a reports-only 2026 data breach report by Ransomware.live on September 7, 2026. The report says a complete password vault was exposed, but the affected count and any exposure of Social Security numbers, medical information, or financial data have not been confirmed.

Colonial Hyundai was listed in a reports-only 2026 data breach entry linked to the Qilin ransomware group. The listing does not confirm the number of affected individuals or the types of data involved.

Sports Endeavors was listed in a ransomware report as a possible data breach victim on September 4, 2026. The report does not provide an affected count or confirm what data, if any, was exposed.

SouthernCarlson was listed in a ransomware-tracking report as the victim of an unconfirmed data breach on September 4, 2026. The available report does not identify affected individuals or compromised data types.