Hibbett Retail (AL, United States) notified the Washington Attorney General and the Texas Attorney General of a data breach on 8 September 2026. It told the states about 510 Washington residents; the total can be higher. Exposed: Social Security numbers, Passport numbers, Driver’s license numbers, Government ID numbers, Health insurance details and Health and medical information and more. The breach began on 22 April 2026, 139 days before it was reported.
Status
Confirmed breach
People affected
510 Washington residents (one state’s count; the total can be higher)
Look for Hibbett Retail, Inc.’s own notice or letter: it should say what of yours was involved. Keep it.
Call your bank on the number printed on your card (never one from a message), check recent payments and ask for a new card.
An ID number cannot be changed, so lock it: a credit freeze or fraud alert in the US, a credit warning (kreditadvarsel) on borger.dk in Denmark, Cifas protective registration in the UK.
Check your health insurer’s statements for treatment you never had.
Expect scams that use your details: calls, texts or emails pretending to be Hibbett Retail, Inc., your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.
Privacy Unpacked