Privacy Unpacked
Menu

Confirmed breach · 3 breaches on record

Hot Topic data breach

Country being checked · hottopic.com

A breach of Hot Topic was added to Have I Been Pwned’s breach database on 11 November 2024. It affected 56,904,909 accounts. Exposed: Financial account and card details, Email addresses, Phone numbers, Dates of birth, Names and Addresses and more. The breach began on 19 October 2024, 23 days before it was reported.

Breach reported 11 November 2024

Status
Confirmed breach
People affected
56,904,909 accounts
Reported
11 November 2024
Breach began
19 October 2024
Time to tell
23 days (the median in California’s notices over the last year: 154 days)

What was exposed

  • Financial account and card details
  • Email addresses
  • Phone numbers
  • Dates of birth
  • Names
  • Addresses
  • Genders
  • Purchases
  • Salutations

Sources

Breach databases are read by code. · Corrections and changes

Breach reported 28 March 2024

Status
Confirmed breach
People affected
157,810 Oregon residents (one state’s count; the total can be higher)
Reported
28 March 2024
Across the state notices
at least 161,465 people (Oregon and Washington: each state counts only its own residents)
Breach began
18 November 2023
Time to tell
131 days (the median in California’s notices over the last year: 154 days)

What was exposed

The register’s list does not say what was exposed; the notice it links to (under Sources) usually does.

Sources

Official notices are read by code from the regulator’s own register. More notices to Oregon, California, Washington. · Corrections and changes

Breach reported 28 July 2023

Status
Confirmed breach
People affected
129,962 Oregon residents (one state’s count; the total can be higher)
Reported
28 July 2023
Across the state notices
at least 132,310 people (Oregon and Washington: each state counts only its own residents)
Breach began
7 February 2023
Time to tell
171 days (the median in California’s notices over the last year: 154 days)

What was exposed

The register’s list does not say what was exposed; the notice it links to (under Sources) usually does.

Sources

Official notices are read by code from the regulator’s own register. More notices to Oregon, California, Washington. · Corrections and changes

If Hot Topic had your data

  1. Look for Hot Topic’s own notice or letter: it should say what of yours was involved. Keep it.
  2. Call your bank on the number printed on your card (never one from a message), check recent payments and ask for a new card.
  3. Expect scams that use your details: calls, texts or emails pretending to be Hot Topic, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

One email to confirm first. We use your address only for this alert, and one click deletes it.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.