Hibbett Retail, Inc. suffered a data breach that occurred on or about April 22, 2026. The company discovered the incident on the same day. State Attorneys General in California, Texas, Vermont, and Washington were notified on September 8, 2026, the same day consumers were notified.
The breach exposed Social Security numbers, names, dates of birth, addresses, driver’s license/government ID numbers, financial account information, health insurance information, and medical information. While the total number of affected individuals is not fully disclosed, at least 15,223 Texas residents and at least six Vermont residents were impacted.
Several details about this incident, including some data types and specific affected counts, are derived from secondary reporting and law firm websites rather than official company statements. More official details may emerge as regulatory processes continue.