Disclosure tracker › Retail disclosures
Intelligence · Disclosure tracker
Retail disclosures
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,278
Disclosures in the tracker, all years
1,991
Of those, indexed in 2026
37
Added in October
7
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 15 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
1,954 results · Retail disclosures. Clear filters
Critical1 Oct 2025
Canadian Tire
Retail · 38,000,000 records
38 million customer accounts exposed including names, addresses, emails, birth years, encrypted passwords
1 Oct 2025
Critical1 Oct 2025
Coupang
Retail · 33,700,000 records
South Korea's largest online retailer suffered massive data breach exposing personal information of 33.7 million customers.
1 Oct 2025
High1 Oct 2025
Toys 'R' Us Canada
Retail · Records not stated
Breach compromised customer names, addresses, emails and phone numbers
1 Oct 2025
Critical1 Oct 2025
Qantas
Retail · 5,000,000 records
Hackers leaked 5 million customer records after ransom deadline passed. Data included personal information from nearly 40 companies.
1 Oct 2025
High1 Oct 2025
Estée Lauder
Retail · Records not stated
Ten-month-old data breach from Oracle EBS disclosed, exposed personal data of customers
1 Oct 2025
Critical1 Oct 2025
Qantas Airways
Retail · 6,000,000 records
Nearly 6 million customer records stolen in July attack, data leaked after ransom deadline by Scattered Lapsus$ Hunters.
1 Oct 2025
High1 Oct 2025
Mango
Retail · Records not stated
External marketing service provider breach exposed limited customer information
1 Oct 2025
High25 Sep 2025
Cultura
Retail · 1,462,025 records
1,462,025 records exposed, Email addresses, Names, Phone numbers, Physical addresses and 1 more
25 Sep 2025
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Potentially millions of customers' personal data stolen in cyberattack on parent company
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cybercriminals stole private data of millions of customers across parent company's luxury brands
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Hackers stole private data of millions of customers from parent company
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cyberattack stole private data of millions of customers from luxury fashion brands
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Hackers stole private data of potentially millions of customers from luxury fashion labels
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cyberattack stole private data of potentially millions of customers from luxury brands
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Private data of millions of customers stolen in cyberattack on luxury fashion parent company
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cybercriminals stole details of potentially millions of customers from parent company Kering's systems
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cyber-attack stole customer data of luxury brands, millions potentially impacted
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Hackers stole private data of customers from luxury brands Gucci, Balenciaga, and Alexander McQueen, potentially millions of people affected.
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cyberattack stole personal data of millions of luxury brand customers
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Hackers stole private data of customers from luxury fashion labels' parent company, potentially millions of people affected
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Hackers stole private data of potentially millions of customers from luxury fashion parent company
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cyber-attack stole private data of potentially millions of luxury brand customers
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Hackers stole private data of potentially millions of customers from luxury fashion brands
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Millions of customers' private data stolen from luxury fashion brands' parent company
1 Sep 2025
Were you affected?