Kroger Company
1.6M customer pharmacy and loyalty records exposed via FTP server misconfiguration
Retail & E-Commerce Data Breaches (636 indexed)
Coles Group (Australia)
1.1M flybuys loyalty member records stolen via compromised marketing platform
LVMH Group
210K luxury retail customer records exposed
Canadian Tire
1.1M customer loyalty records exposed in platform breach
CarMax
431,371 records exposed — Email addresses, Names, Phone numbers, Physical addresses
Adidas (Third-Party Breach)
815K customer records stolen from third-party licensing partner — second breach in a year
Canada Goose
581,877 records exposed — Device information, Email addresses, IP addresses, Names and 4 more
Metro Inc. (Canada)
740K customer records from Jean Coutu pharmacy division exposed in ransomware attack
Nike Inc.
1.2M SNKRS app user records exposed — sneaker purchase history and payment data stolen
Fake AI Assistants in Google
Hundreds of thousands of users have downloaded malicious AI extensions masquerading as ChatGPT, Gemini, Grok and others, warn cybersecurity researchers at LayerX
Walgreens Boots Alliance
2.1M pharmacy patient records exposed via compromised health services vendor
Weston Foods (George Weston)
340K employee and supply records exposed
Zara (Inditex)
890K customer records stolen
Couche-Tard (Circle K Canada)
1.2M customer payment records exposed in POS breach
Home Depot (2026)
3.2M customer records exposed via SaaS vendor breach affecting loyalty program data
Panera Bread
5,112,502 records exposed — Email addresses, Names, Phone numbers, Physical addresses
Woolworths Group (Australia)
860K Everyday Rewards member records exposed via supply chain software vulnerability
Target Corporation (2026)
890K customer credit applications and RedCard data exposed via compromised credit processor
Raaga
10,225,145 records exposed — Ages, Dates of birth, Email addresses, Genders and 3 more
Alimentation Couche-Tard (Canada)
620K Circle K loyalty customer records stolen from Canadian convenience store operator
Costco Wholesale
1.9M customer records stolen from payment processing system via skimming malware at warehouses
Starbucks Corporation
950K rewards member records exposed via API vulnerability in mobile order-ahead system
MEC (Mountain Equipment)
450K member records compromised
Sleep Country Canada
190K customer records compromised