Disclosure tracker › Retail disclosures
Intelligence · Disclosure tracker
Retail disclosures
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,274
Disclosures in the tracker, all years
1,988
Of those, indexed in 2026
37
Added in October
8
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 14 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
1,954 results · Retail disclosures. Clear filters
High17 Sep 2026
Krispy Kreme
Retail · 160,000 records
Data breach from 2024 attack stealing data from over 160,000 people
17 Sep 2026
Critical17 Sep 2026
Coupang
Retail · 33,700,000 records
33.7M customers' data exposed; South Korea fined company $409M
17 Sep 2026
High16 Sep 2026
Stiiizy
Retail · Records not stated
Data breach at cannabis retailer impacts 380,000
16 Sep 2026
High16 Sep 2026
Krispy Kreme
Retail · 160,000 records
Over 160,000 people had data stolen in 2024 attack
16 Sep 2026
Critical16 Sep 2026
MGM
Retail · Records not stated
2019 data breach; agreed $45 million settlement
16 Sep 2026
High16 Sep 2026
16 Sep 2026
High15 Sep 2026
Estée Lauder
Retail · Records not stated
Data breach from Oracle EBS zero-day hack disclosed
15 Sep 2026
High15 Sep 2026
7-Eleven
Retail · 185,000 records
Data breach affected over 185,000 people's personal and payment information
15 Sep 2026
High15 Sep 2026
Krispy Kreme
Retail · 160,000 records
Over 160,000 people had data stolen during cyber attack in 2024
15 Sep 2026
High14 Sep 2026
Mizuno
Retail · Records not stated
Ransomware attack exposed customer data in 2024
14 Sep 2026
Critical1 Sep 2026
Carhartt
Retail · Records not stated
Shiny Hunters stole data, demanded $3.3 million ransom
1 Sep 2026
Critical1 Sep 2026
Carhartt
Retail · Records not stated
ShinyHunters published stolen data; millions exposed after alleged $3.3M ransom demand
1 Sep 2026
High1 Sep 2026
Carhartt
Retail · Records not stated
Data breach exposed customer personal information; attacker demanded $3.3 million ransom
1 Sep 2026
High1 Sep 2026
Carhartt
Retail · Records not stated
Millions of customer records stolen by ShinyHunters ransomware group demanding $3.3 million
1 Sep 2026
High1 Sep 2026
Hasbro
Retail · Records not stated
Employee personal and financial information exposed
1 Sep 2026
Critical1 Sep 2026
Carhartt
Retail · 12,900,000 records
Customer data tied to 12.9 million accounts leaked online
1 Sep 2026
High1 Sep 2026
Hasbro
Retail · Records not stated
Data breach revealed employee personal and financial information
1 Sep 2026
High1 Sep 2026
Questel
Retail · 1,226,209 records
1,226,209 records exposed, Email addresses, Employers, Job titles, Names and 3 more
1 Sep 2026
Critical25 Aug 2026
Carhartt
Retail · 12,933,413 records
12,933,413 records exposed, Email addresses, Names, Phone numbers, Physical addresses
25 Aug 2026
High19 Aug 2026
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cybersecurity researchers have flagged a global cybercrime operation that abuses thousands of hacked WordPress websites as infrastructure to disseminate malware, commandeer infected hosts, store stolen documents…
19 Aug 2026
High19 Aug 2026
Oz Hair and Beauty
Retail · 1,988,331 records
1,988,331 records exposed, Email addresses, Geographic locations, Names, Phone numbers and 1 more
19 Aug 2026
High19 Aug 2026
Fanlore
Retail · 144,520 records
144,520 records exposed, Email addresses, Names, Passwords, Usernames
19 Aug 2026
Medium17 Aug 2026
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
The SANDCLOCK LiteLLM supply-chain attack exposed credentials across 2,038 repositories, affecting technology, finance, healthcare, retail and more. Resecurity (USA) estimated the most affected sectors by the “SANDCLOCK”
17 Aug 2026
High15 Aug 2026
Mizuno
Retail · Records not stated
Japanese sportswear company confirmed data breach following 2024 ransomware attack affecting customers
15 Aug 2026
Were you affected?