Disclosure tracker › Retail disclosures
Intelligence · Disclosure tracker
Retail disclosures
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,278
Disclosures in the tracker, all years
1,991
Of those, indexed in 2026
37
Added in October
8
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 14 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
1,954 results · Retail disclosures. Clear filters
Medium13 Oct 2026
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
The South African retail giant The Foschini Group (TFG) disclosed a cyberattack that disrupted IT systems at three of its British fashion brands, leaving some services unavailable.
13 Oct 2026
Medium9 Oct 2026
Neogen
Retail · 435,963 records
435,963 records exposed, Email addresses, Employers, Job titles, Names and 3 more
9 Oct 2026
Medium7 Oct 2026
CyrusOne
Retail · 373,460 records
373,460 records exposed, Email addresses, Employers, Job titles, Names and 3 more
7 Oct 2026
Medium5 Oct 2026
Ukraine grocery chain ATB
Retail · Records not stated
Ukraine’s largest grocery store chain, ATB, confirmed that it was hit by a cyberattack after hackers posted an extortion demand on its website.
5 Oct 2026
High1 Oct 2026
ASOS
Retail · Records not stated
Hackers compromised third-party communication platform; breach exposed more personal details than initially reported including contact information
1 Oct 2026
Critical1 Oct 2026
Lawson
Retail · 2,155,345 records
2,155,345 records of personal information leaked due to unauthorized access to Lawson IDs
1 Oct 2026
High1 Oct 2026
ASOS
Retail · Records not stated
Third-party communication platform compromised; hackers accessed customer personal data beyond basic contact details
1 Oct 2026
Critical29 Sep 2026
Organisation not named
Retail · 68,000,000 records
The disclosure as indexed does not name the organisation.
Andrey Mihayloff reports: Dodo Pizza has confirmed a cyberattack on its IT systems, admitting that attackers may have accessed personal data of a portion of its customer base. The company reported the breach to…
29 Sep 2026
Critical25 Sep 2026
Canadian Tire
Retail · 38,000,000 records
38 million accounts compromised in data breach
25 Sep 2026
High25 Sep 2026
Mizuno
Retail · Records not stated
Confirmed data breach after 2024 ransomware attack; customer data exposed
25 Sep 2026
Critical25 Sep 2026
Coupang
Retail · 33,700,000 records
33.7 million accounts exposed, resulted in $409 million South Korea fine
25 Sep 2026
Critical24 Sep 2026
Coupang
Retail · 33,700,000 records
Data breach exposed 33.7 million accounts, resulted in $409 million South Korea fine
24 Sep 2026
Medium23 Sep 2026
Lovesac
Retail · Records not stated
Data breach confirmed following ransomware attack
23 Sep 2026
High23 Sep 2026
Renault Group
Retail · Records not stated
UK customer data stolen in third-party breach affecting auto industry
23 Sep 2026
High23 Sep 2026
Lands' End
Retail · Records not stated
Data breach impacted clothing retailer customers; case settled with compensation
23 Sep 2026
High22 Sep 2026
Lovesac
Retail · Records not stated
Data breach confirmed after ransomware attack
22 Sep 2026
High22 Sep 2026
Estée Lauder
Retail · Records not stated
Data breach via Oracle E-Business flaw
22 Sep 2026
Critical22 Sep 2026
Canadian Tire
Retail · 42,000,000 records
2025 data breach exposed 42 million records
22 Sep 2026
Critical22 Sep 2026
Coupang
Retail · 33,700,000 records
Data breach exposed 33.7 million accounts, resulting in $409 million fine from South Korea
22 Sep 2026
Medium21 Sep 2026
BigCommerce
Retail · Records not stated
Ecommerce platform BigCommerce has alerted multiple merchants to data breaches after attackers compromised credentials for third-party Ribon applications and used them to inject malicious scripts into online stores.
21 Sep 2026
High21 Sep 2026
Estée Lauder
Retail · Records not stated
Data breach via Oracle E-Business Suite flaw
21 Sep 2026
High21 Sep 2026
Home Depot
Retail · Records not stated
Leaked private GitHub token gave unauthorized access to internal systems for over a year
21 Sep 2026
High18 Sep 2026
Mizuno
Retail · Records not stated
Data breach confirmed after 2024 ransomware attack affecting customer data
18 Sep 2026
Medium17 Sep 2026
ThreatsDay
Retail · Records not stated
Attackers keep finding new keys. The funny part is that defenders keep inventing where to store them.
This week, those keys sit in AI tools, exposed services, old bugs, weak logins, and software sold like a monthly…
17 Sep 2026
Were you affected?