Disclosure tracker › Retail disclosures
Intelligence · Disclosure tracker
Retail disclosures
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,369
Disclosures in the tracker, all years
2,083
Of those, indexed in 2026
146
Added in October
23
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 30 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
2,108 results · Retail disclosures. Clear filters
Critical1 Sep 2026
Carhartt
Retail · Records not stated
ShinyHunters published stolen data; millions exposed after alleged $3.3M ransom demand
1 Sep 2026
High1 Sep 2026
Carhartt
Retail · Records not stated
Data breach exposed customer personal information; attacker demanded $3.3 million ransom
1 Sep 2026
High1 Sep 2026
Carhartt
Retail · Records not stated
Millions of customer records stolen by ShinyHunters ransomware group demanding $3.3 million
1 Sep 2026
High1 Sep 2026
Hasbro
Retail · Records not stated
Employee personal and financial information exposed
1 Sep 2026
Critical1 Sep 2026
Carhartt
Retail · 12,900,000 records
Customer data tied to 12.9 million accounts leaked online
1 Sep 2026
High1 Sep 2026
Hasbro
Retail · Records not stated
Data breach revealed employee personal and financial information
1 Sep 2026
High1 Sep 2026
Questel
Retail · 1,226,209 records
1,226,209 records exposed, Email addresses, Employers, Job titles, Names and 3 more
1 Sep 2026
Critical25 Aug 2026
Carhartt
Retail · 12,933,413 records
12,933,413 records exposed, Email addresses, Names, Phone numbers, Physical addresses
25 Aug 2026
High19 Aug 2026
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cybersecurity researchers have flagged a global cybercrime operation that abuses thousands of hacked WordPress websites as infrastructure to disseminate malware, commandeer infected hosts, store stolen documents…
19 Aug 2026
High19 Aug 2026
Oz Hair and Beauty
Retail · 1,988,331 records
1,988,331 records exposed, Email addresses, Geographic locations, Names, Phone numbers and 1 more
19 Aug 2026
High19 Aug 2026
Fanlore
Retail · 144,520 records
144,520 records exposed, Email addresses, Names, Passwords, Usernames
19 Aug 2026
Medium17 Aug 2026
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
The SANDCLOCK LiteLLM supply-chain attack exposed credentials across 2,038 repositories, affecting technology, finance, healthcare, retail and more. Resecurity (USA) estimated the most affected sectors by the “SANDCLOCK”
17 Aug 2026
High15 Aug 2026
Mizuno
Retail · Records not stated
Japanese sportswear company confirmed data breach following 2024 ransomware attack affecting customers
15 Aug 2026
Critical13 Aug 2026
Ticketmaster
Retail · 560,000,000 records
Data breach part of 2024 Snowflake campaign affecting 165+ companies. Hacker pleaded guilty to fraud and extortion.
13 Aug 2026
Critical13 Aug 2026
13 Aug 2026
High13 Aug 2026
Ryanair
Retail · Records not stated
Data breach exposing court documents, flight data, and banking details claimed on hacker forums
13 Aug 2026
Critical12 Aug 2026
12 Aug 2026
High12 Aug 2026
12 Aug 2026
High12 Aug 2026
Fairlife
Retail · Records not stated
Dairy company ransomware attack disrupted Coca-Cola US production operations
12 Aug 2026
High12 Aug 2026
Levi Strauss
Retail · Records not stated
Clothing retailer data breach via social engineering attack exposed customer data
12 Aug 2026
High12 Aug 2026
Chick-fil-A
Retail · Records not stated
Loyalty account data breach exposed customer names, emails, and personal information across multiple states
12 Aug 2026
Critical11 Aug 2026
Carnival Corporation
Retail · 6,000,000 records
6M customers hit via social engineering attack
11 Aug 2026
Critical11 Aug 2026
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
The ransomware group known as DeadLock has been observed using decentralized infrastructure to facilitate victim communications and data leak operations in a bid to improve operational resilience.
"Its recovery…
11 Aug 2026
High11 Aug 2026
Chick-fil-A
Retail · Records not stated
Customer loyalty accounts compromised; hackers accessed names, emails using stolen credentials across multiple states
11 Aug 2026
Were you affected?