Retail Data Breaches — Page 4

Retail Merchandising Services experienced a data breach in November 2025, which was disclosed in March 2026.

Steve Quick Jeweler experienced a data breach in March 2026 due to a ransomware attack by the Akira group.

Wills Point Chevrolet experienced a data breach in March 2026, confirmed through ransomware tracking sites.

Starbucks Corporation experienced a data breach in early 2026 involving unauthorized access to employee accounts.

A ransomware claim against Staples was reported in March 2026, though details regarding affected individuals and data types remain unconfirmed. This claim is separate from the 2014 payment card breach and a 2023 cyberattack that disrupted online ordering.

Service Lighting, Inc. experienced a data breach in 2026 affecting approximately 25,736 individuals, primarily involving payment card information.

Bayshore Ford Truck Sales, a Ford dealership in New Castle, Delaware, was claimed as a ransomware victim by the Qilin group on March 3, 2026, with reports indicating a data breach and exfiltration of information.

A cyberattack against Nickey Kehoe in March 2026 reportedly compromised personally identifiable information, though official confirmation and details remain unverified.

Jac Vandenberg, a US-based fresh produce supplier, experienced a data breach in February 2026, reportedly due to a DragonForce ransomware attack.

Hum’s Hardware & Rental experienced a data breach in February 2026, reportedly due to the Lockbit5 ransomware group.

True Value, a US-based home improvement retailer, experienced a data breach in February 2026 due to a ransomware attack by the group "thegentlemen". Details regarding affected individuals or specific data types remain unconfirmed.

H&N Tax, Inc data breach: The Federal Trade Commission is taking action against tax preparation company H&R Block for unfairly deleting consumers’ tax data and requiring them t...

Cargo Largo, a discount retail store, experienced a data breach in February 2026 due to an Akira ransomware attack, with the attackers claiming to possess customer information, financials, and other internal corporate files. The exact number of affected individuals has not been disclosed.

hh2home.com, a furniture wholesaler, was claimed as a ransomware victim by the Dragonforce group on February 16, 2026. Details on affected individuals or specific data types remain unconfirmed.

A data breach affecting LKQ in 2025 has been reported, but details remain largely unconfirmed by official sources as of early 2026.

A data breach involving SuKarne was reported in December 2025 by Daily Dark Web, though no confirmed breach has been found in other research.

A data breach reportedly impacting Scalextric.es in 2025 has been reported, with an alleged exposure of 100,000 customer records. However, there is no official confirmation of this incident. This information is based on reports only.

Coupang, a South Korea-based e-commerce company, experienced a data breach in 2025 affecting approximately 33.67 million user accounts, primarily in Korea, with data including names, email addresses, phone numbers, and physical addresses exposed.

Petco experienced a data exposure in late 2025/early 2026 involving customer personal information and pet medical documents via its Vetco Clinics website.

Reports suggest a data breach occurred at Integra Energía in 2025, but this information has not been confirmed by official sources.