E-commerce platforms, point-of-sale systems, loyalty programs, and customer databases remain frequent targets for credential theft and card-skimming campaigns. Below is every retail-sector breach LeakTrace has indexed.
The ShinyHunters extortion gang stole the personal information of over 183,000 people after hacking the systems of convenience store chain giant 7-Eleven in April, according to data breach notification service Have I Bee
46,105 records exposed — Email addresses, IP addresses, Passwords, Usernames
The retailer confirmed that an unauthorized third party gained access to certain systems used to store franchisee documents earlier this spring.
The breach notification letters say 7-Eleven discovered the breach on April 8 and, after an investigation, determined that the cybercriminals gained access to “certain 7-Eleven systems used to store franchisee documents.
The Ukrainian cyberpolice, working in conjunction with U.S. law enforcement, has identified an 18-year-old man from Odesa suspected of running an infostealer malware operation targeting users of an online store in Califo
Convenience store chain giant 7-Eleven confirmed that its systems were breached in a cyberattack claimed by the ShinyHunters extortion group last month. [...]
A hotel check-in system exposed over 1 million passports, IDs, and selfies online due to a misconfigured cloud storage bucket. A security lapse in the Reqrea’s Tabiq hotel check-in system exposed over 1 million pas
237,810 records exposed — Email addresses, Job titles, Names, Phone numbers and 3 more
Škoda Auto, a wholly owned subsidiary of the Volkswagen Group, has disclosed a data breach after attackers hacked its online shop and stole the personal information of an undisclosed number of customers. [...]
BWH Hotels says hackers accessed guest reservation data, including names and contacts, for over six months across multiple hotel brands. BWH Hotels disclosed a data breach, with threat actors having had access to guest r
Using a vulnerability in the portal, hackers accessed names, addresses, email addresses, and phone numbers. The post Skoda Data Breach Hits Online Shop Customers appeared first on SecurityWeek.
Nearly 200,000 Zara customers were exposed in a third-party breach linked to ShinyHunters, revealing emails, purchase history, and support data. Personal data belonging to nearly 197,000 Zara customers has been compromis
215,563 records exposed — Dates of birth, Email addresses, Genders, Language preferences and 6 more
Researchers uncover a new data theft and extortion group dubbed “BlackFile”
A new financially motivated hacking group tracked as BlackFile has been linked to a wave of data theft and extortion attacks against retail and hospitality organizations since February 2026. [...]
2,147,679 records exposed — Email addresses, Names, Physical addresses, Support tickets
1,736,520 records exposed — Email addresses, Names, Phone numbers, Physical addresses and 1 more
1,195,684 records exposed — Email addresses
38M customer records including names, emails, phone numbers via third-party breach
3.7M chat logs and 1.4M audio files exposed containing PII from AI chatbot
800K employee records including SSNs and PII claimed by ShinyHunters
889 employee accounts compromised exposing SSNs, financial data via Partner Central
340K customer records from loyalty program and online orders exposed via web app vulnerability
2.8M PC Optimum loyalty member records stolen including purchase history and contact data