Weekly briefing No. 42 published 30 Oct 2026
Disclosure tracker › Retail disclosures
Intelligence · Disclosure tracker

Retail disclosures

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,583
Disclosures in the tracker, all years
2,083
Of those, indexed in 2026
147
Added in October
22
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 31 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

2,108 results · Retail disclosures. Clear filters

High1 Sep 2025
Estée Lauder
Retail · Records not stated
Data breach from Oracle EBS exposure leaked personal customer data; disclosed 10 months after occurrence
1 Sep 2025
High1 Sep 2025
Giglio
Retail · 1,026,468 records
1,026,468 records exposed, Email addresses, Names, Phone numbers, Physical addresses
1 Sep 2025
High1 Aug 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Data security incident, $40M settlement reached in class action
1 Aug 2025
High1 Aug 2025
Data security incident resulted in $40M settlement
Retail · Records not stated
Data security incident resulted in $40M settlement
1 Aug 2025
High1 Aug 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Data security incident affecting personal information, $40M settlement reached
1 Aug 2025
High1 Aug 2025
Data breach
Retail · Records not stated
Data breach exposed personal information; companies reached $40M settlement
1 Aug 2025
High1 Aug 2025
Cencora
Retail · Records not stated
Data security incident resolved with $40M settlement in class action
1 Aug 2025
High1 Aug 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Data security incident with $40M settlement reached in class action lawsuit
1 Aug 2025
Critical1 Jul 2025
Qantas Airways
Retail · 5,000,000 records
Personal data of 5 million customers stolen in July 2025, leaked online after ransom deadline passed
1 Jul 2025
Critical1 Jul 2025
Qantas Airways
Retail · 6,000,000 records
Criminals stole approximately 6 million customer records in July 2025; data later leaked by Scattered Lapsus$ Hunters
1 Jul 2025
Medium25 Jun 2025
Robinsons Malls
Retail · 195,597 records
195,597 records exposed, Dates of birth, Email addresses, Genders, Geographic locations and 2 more
25 Jun 2025
High10 Jun 2025
WiredBucks
Retail · 918,529 records
918,529 records exposed, Earnings, Email addresses, IP addresses, Names and 3 more
10 Jun 2025
High7 Jun 2025
Disk Union
Retail · 690,667 records
690,667 records exposed, Email addresses, Geographic locations, Names, Passwords and 2 more
7 Jun 2025
High1 Jun 2025
Ahold Delhaize
Retail · 2,200,000 records
2.2 million customers' personal data exposed in cyberattack on U.S. operations
1 Jun 2025
Critical1 Jun 2025
Ahold Delhaize
Retail · 2,200,000 records
US operations breach exposed personal data of 2.2 million customers
1 Jun 2025
Critical1 Jun 2025
Qantas
Retail · 6,000,000 records
Cyber attack on third-party customer service platform impacting 6 million customers
1 Jun 2025
Critical1 Jun 2025
Qantas
Retail · Records not stated
Cyber attack on third-party customer service platform impacted 6 million airline customers
1 Jun 2025
High1 Jun 2025
Ahold Delhaize
Retail · 2,200,000 records
Cyber-attack on US operations exposed personal data of 2.2 million customers
1 Jun 2025
Critical1 Jun 2025
Ahold Delhaize
Retail · 2,200,000 records
Cyber-attack on US operations exposed personal data of over 2.2 million customers
1 Jun 2025
Critical8 May 2025
OnRPG
Retail · 1,047,640 records
1,047,640 records exposed, Email addresses, IP addresses, Passwords, Usernames
8 May 2025
High1 May 2025
Adidas
Retail · Records not stated
Cyberattack exposed customers' personal information and credit card data
1 May 2025
Medium1 May 2025
Harrods (UK)
Retail · Records not stated
Luxury retailer confirmed cyber incident, restricted internet access as precaution
1 May 2025
High30 Apr 2025
Co-op Group (UK)
Retail · Records not stated
Attempted cyberattack forced Co-op to shut down IT systems, operations disrupted
30 Apr 2025
High22 Apr 2025
Marks & Spencer Cyber Incident
Retail · Records not stated
Cyberattack disrupted online ordering and contactless payments across UK stores
22 Apr 2025
Were you affected?