https://privacyunpacked.com/breaches/sector/retail/feed.xml 2026-11-12T00:00:00Z Privacy Unpacked https://privacyunpacked.com/breaches/company/united-supermarket-holdings/#unitedsupermarket-2026-11-12 2026-11-12T00:00:00Z

Nikkei Business Daily reported a data breach at United Supermarket Holdings (USMH) (Japan) on 12 November 2026. It affected 64,003 accounts. Exposed: Email addresses and Names.

https://privacyunpacked.com/breaches/company/h2o-retailing/#h2oretailing-2026-11-10 2026-11-10T00:00:00Z

Security NEXT reported a data breach at H2O Retailing (Japan) on 10 November 2026. Exposed: Email addresses, Phone numbers, Dates of birth, Names, Addresses and Gender.

https://privacyunpacked.com/breaches/company/kult-of-athena/#dmwretailenterprisesdbakultofathena-2026-10-28 2026-10-23T00:00:00Z

DMW Retail Enterprises LLC dba Kult of Athena (KOA) (IL, United States) notified the Texas Attorney General and the Indiana Attorney General of a data breach on 23 October 2026. It affected 4,645 people. Exposed: Financial account and card details and Names. The breach began on 29 May 2026, 147 days before it was reported.

https://privacyunpacked.com/breaches/company/harbor-fish-market/#harborfishmarket-2026-09-25 2026-09-25T00:00:00Z

Harbor Fish Market (United States) notified the Indiana Attorney General and the Vermont Attorney General of a data breach on 25 September 2026. It affected 747 people. Exposed: Financial account and card details. The breach began on 7 February 2026, 230 days before it was reported.

https://privacyunpacked.com/breaches/company/powerhouse-retail-services/#powerhouseretailservices-2026-09-16 2026-09-16T00:00:00Z

Powerhouse Retail Services (United States) notified the Indiana Attorney General and the Vermont Attorney General of a data breach on 16 September 2026. It affected 874 people. Exposed: Social Security numbers. The breach began on 22 May 2026, 117 days before it was reported.

https://privacyunpacked.com/breaches/company/petco-animal-supplies-stores/#petcoanimalsuppliesstores-2026-09-10 2026-09-10T00:00:00Z

Petco Animal Supplies Stores (United States) notified the Vermont Attorney General of a data breach on 10 September 2026. It told that state about 1 Vermont residents; the total can be higher. Exposed: Government ID numbers.

https://privacyunpacked.com/breaches/company/hibbert-retail/#hibbertretail-2026-09-08 2026-09-08T00:00:00Z

Hibbert Retail (United States) notified the Vermont Attorney General of a data breach on 8 September 2026. It told that state about 6 Vermont residents; the total can be higher. Exposed: Social Security numbers.

https://privacyunpacked.com/breaches/company/hibbett-retail/#hibbettretail-2026-09-08 2026-09-08T00:00:00Z

Hibbett Retail (AL, United States) notified the Washington Attorney General, the Texas Attorney General, the Indiana Attorney General and the California Attorney General of a data breach on 8 September 2026. It affected 109,732 people. Exposed: Social Security numbers, Passport numbers, Driver’s license numbers, Government ID numbers, Health insurance details and Health and medical information and more. The breach began on 22 April 2026, 139 days before it was reported.

https://privacyunpacked.com/breaches/company/oz-hair-and-beauty/#ozhairandbeauty-2026-08-19 2026-08-19T00:00:00Z

A breach of Oz Hair and Beauty (Australia) was added to Have I Been Pwned’s breach database on 19 August 2026. It affected 1,988,331 accounts. Exposed: Email addresses, Phone numbers, Names, Geographic locations and Purchases. The breach began on 15 August 2026, 4 days before it was reported.

https://privacyunpacked.com/breaches/company/springs-window-fashions/#springswindowfashions-2026-08-12 2026-08-12T00:00:00Z

Springs Window Fashions (United States) notified the Indiana Attorney General of a data breach on 12 August 2026. It affected 75 people. The breach began on 12 July 2026, 31 days before it was reported.

https://privacyunpacked.com/breaches/company/shop-fan-expo/#informacanadadbashopfanexpo-2026-06-05 2026-06-05T00:00:00Z

Informa Canada Inc. dba Shop FAN EXPO (United States) notified the Vermont Attorney General and the Indiana Attorney General of a data breach on 5 June 2026. It affected 2,290 people. Exposed: Financial account and card details.

https://privacyunpacked.com/breaches/company/retail-services-wis/#retailserviceswis-2026-05-16 2026-05-16T00:00:00Z

Retail Services WIS (United States) notified the Vermont Attorney General of a data breach on 16 May 2026. It told that state about 1 Vermont residents; the total can be higher. Exposed: Social Security numbers.

https://privacyunpacked.com/breaches/company/hank-s-furniture/#hanksfurniture-2026-05-18 2026-05-15T00:00:00Z

Hank’s Furniture (AR, United States) notified the Texas Attorney General and the Indiana Attorney General of a data breach on 15 May 2026. It affected 58,119 people. Exposed: Social Security numbers, Driver’s license numbers, Government ID numbers and Financial account and card details. The breach began on 7 January 2026, 128 days before it was reported.

https://privacyunpacked.com/breaches/company/shop-fan-expo/#informacanadadbashopfanexpo-2026-06-05 2026-04-17T00:00:00Z

Informa Canada Inc. dba Shop FAN EXPO (United States) notified the Vermont Attorney General, the Texas Attorney General, the Indiana Attorney General and the California Attorney General of a data breach on 17 April 2026. It affected 2,290 people. Exposed: Social Security numbers, Financial account and card details, Dates of birth and Names. The breach began on 11 August 2025, 249 days before it was reported.

https://privacyunpacked.com/breaches/company/ernie-s-store/#erniesstore-2026-03-19 2026-03-19T00:00:00Z

Ernie's Store (United States) notified the Indiana Attorney General of a data breach on 19 March 2026. It affected 898 people. The breach began on 19 June 2025, 273 days before it was reported.

https://privacyunpacked.com/breaches/company/retail-merchandising-services/#retailmerchandisingservices-2026-03-17 2026-03-16T00:00:00Z

Retail Merchandising Services (MN, United States) notified the Texas Attorney General, the Indiana Attorney General and the California Attorney General of a data breach on 16 March 2026. It affected 16,114 people. Exposed: Social Security numbers, Financial account and card details, Dates of birth, Names and Addresses. The breach began on 24 November 2025, 112 days before it was reported.

https://privacyunpacked.com/breaches/company/powerhouse-retail-services/#powerhouseretailservices-2026-02-04 2026-02-03T00:00:00Z

Powerhouse Retail Services (United States) notified the Texas Attorney General and the Indiana Attorney General of a data breach on 3 February 2026. It affected 7,856 people. Exposed: Social Security numbers, Driver’s license numbers, Health and medical information, Financial account and card details and Names. The breach began on 20 September 2023, 867 days before it was reported.

https://privacyunpacked.com/breaches/company/morgan-s-shoes/#morgansshoes-2026-01-30 2026-01-30T00:00:00Z

Morgan's Shoes (United States) notified the Indiana Attorney General of a data breach on 30 January 2026. It affected 104 people. The breach began on 13 August 2025, 170 days before it was reported.

https://privacyunpacked.com/breaches/company/fullbeauty-brands/#fullbeautybrands-2026-01-23 2026-01-16T00:00:00Z

FullBeauty Brands (NY, United States) notified the Texas Attorney General and the Indiana Attorney General of a data breach on 16 January 2026. It affected 4,725 people. Exposed: Social Security numbers, Health insurance details, Health and medical information and Names. The breach began on 18 October 2025, 90 days before it was reported.

https://privacyunpacked.com/breaches/company/petco-animal-supplies-stores/#petcoanimalsuppliesstores-2025-12-05 2025-12-03T00:00:00Z

Petco Animal Supplies Stores (United States) notified the Texas Attorney General and the California Attorney General of a data breach on 3 December 2025. It told the states about 329 Texas residents; the total can be higher. Exposed: Social Security numbers, Driver’s license numbers, Financial account and card details, Dates of birth and Names. The breach began on 1 January 2019, 2,528 days before it was reported.

https://privacyunpacked.com/breaches/company/job-shop/#foresteinsteinstaffing-2025-10-31 2025-09-29T00:00:00Z

Forest & Einstein Staffing, Inc. d/b/a The Job Shop (United States) notified the California Attorney General of a data breach on 29 September 2025. The breach began on 10 June 2025, 111 days before it was reported.

https://privacyunpacked.com/breaches/company/furniture-mart-usa/#furnituremartusa-2025-01-24 2025-01-24T00:00:00Z

Furniture Mart, USA (United States) notified the Iowa Attorney General of a data breach on 24 January 2025.

https://privacyunpacked.com/breaches/company/bob-s-discount-furniture/#bobsdiscountfurniture-2024-12-03 2024-12-03T00:00:00Z

Bob's Discount Furniture (United States) notified the California Attorney General of a data breach on 3 December 2024. The breach began on 25 September 2024, 69 days before it was reported.

https://privacyunpacked.com/breaches/company/save-mart-supermarkets/#savemartsupermarkets-2024-10-15 2024-10-15T00:00:00Z

Save Mart Supermarkets (United States) notified the California Attorney General of a data breach on 15 October 2024. The breach began on 21 August 2023, 421 days before it was reported.

https://privacyunpacked.com/breaches/company/dick-s-sporting-goods/#dickssportinggoods-2024-09-17 2024-09-17T00:00:00Z

DICK'S Sporting Goods (United States) notified the Washington Attorney General of a data breach on 17 September 2024. It told that state about 72,012 Washington residents; the total can be higher. The breach began on 21 August 2024, 27 days before it was reported.

https://privacyunpacked.com/breaches/company/retail-data/#retaildata-2024-09-06 2024-09-06T00:00:00Z

Retail Data (United States) notified the California Attorney General of a data breach on 6 September 2024. The breach began on 22 June 2024, 76 days before it was reported.

https://privacyunpacked.com/breaches/company/market-moveis/#marketmoveis-2024-09-01 2024-09-01T00:00:00Z

A breach of Market Moveis (Portugal) was added to Have I Been Pwned’s breach database on 1 September 2024. It affected 28,220 accounts. Exposed: Email addresses and Names. The breach began on 30 August 2023, 368 days before it was reported.

https://privacyunpacked.com/breaches/company/bassett-furniture-industries/#bassettfurnitureindustries-2024-07-15 2024-07-15T00:00:00Z

Bassett Furniture Industries (VA, United States) notified the US Securities and Exchange Commission (8-K Item 1.05) of a data breach on 15 July 2024.

https://privacyunpacked.com/breaches/company/advance-stores/#advancestores-2024-07-10 2024-07-10T00:00:00Z

Advance Stores Company (United States) notified the Oregon Department of Justice, the Iowa Attorney General, the California Attorney General, the Washington Attorney General and the Delaware Attorney General of a data breach on 10 July 2024. It told the states about 2,316,591 Oregon residents; the total can be higher. The breach began on 14 April 2024, 87 days before it was reported.

https://privacyunpacked.com/breaches/company/pennsylvania-general-store/#pennsylvaniageneralstore-2023-10-27 2023-10-27T00:00:00Z

Pennsylvania General Store (United States) notified the California Attorney General of a data breach on 27 October 2023. The breach began on 24 November 2021, 702 days before it was reported.

https://privacyunpacked.com/breaches/company/bassett-furniture-industries/#bassettfurnitureindustries-2023-09-22 2023-09-22T00:00:00Z

Bassett Furniture Industries (VA, United States) notified the California Attorney General of a data breach on 22 September 2023. The breach began on 29 July 2021, 785 days before it was reported.

https://privacyunpacked.com/breaches/company/amana-meat-shop-and-smokehouse/#amanameatshopsmokehouse-2023-09-18 2023-09-18T00:00:00Z

Amana Meat Shop & Smokehouse (United States) notified the Iowa Attorney General and the California Attorney General of a data breach on 18 September 2023. The breach began on 24 November 2021, 663 days before it was reported.

https://privacyunpacked.com/breaches/company/ups-store-3270/#upsstore3270-2023-09-06 2023-09-06T00:00:00Z

The UPS Store #3270 (United States) notified the California Attorney General of a data breach on 6 September 2023. The breach began on 17 July 2023, 51 days before it was reported.

https://privacyunpacked.com/breaches/company/markwins-beauty-brands/#markwinsbeautybrands-2023-06-13 2023-06-13T00:00:00Z

Markwins Beauty Brands (United States) notified the California Attorney General of a data breach on 13 June 2023. The breach began on 13 February 2023, 120 days before it was reported.

https://privacyunpacked.com/breaches/company/shopper/#shopper-2023-03-11 2023-03-11T00:00:00Z

A breach of Shopper+ (Canada) was added to Have I Been Pwned’s breach database on 11 March 2023. It affected 878,290 accounts. Exposed: Email addresses, Phone numbers, Dates of birth, Names, Addresses and Genders and more. The breach began on 14 September 2020, 908 days before it was reported.

https://privacyunpacked.com/breaches/company/swimoutlet-com/#swimoutletcom-2023-01-25 2023-01-25T00:00:00Z

SwimOutlet.com (United States) notified the California Attorney General of a data breach on 25 January 2023. The breach began on 4 January 2023, 21 days before it was reported.

https://privacyunpacked.com/breaches/company/bargain-balloons/#specialbuysclothingdbabargainballoons-2023-01-19 2023-01-19T00:00:00Z

Special Buys Clothing Inc. DBA Bargain Balloons (United States) notified the California Attorney General of a data breach on 19 January 2023. The breach began on 27 September 2022, 114 days before it was reported.