Between November 20, 2025, and December 11, 2025, Retail Therapy LLC experienced an external system breach. The company discovered this breach on March 19, 2026, and began notifying consumers on April 14, 2026. The Maine Attorney General received notification of the incident on April 14, 2026.
The breach may have involved the acquisition of names, Social Security numbers, dates of birth, driver's license numbers, state identification numbers, and passport numbers. The exact total number of individuals affected has not been publicly disclosed, though at least two Maine residents were impacted. The company is offering 24 months of complimentary credit monitoring and identity restoration services through TransUnion.
Data breach details can emerge over time, and consumer notifications may be delayed.