Live disclosure tracker · updated continuously

Retail & E-Commerce Data Breaches

E-commerce platforms, point-of-sale systems, loyalty programs, and customer databases remain frequent targets for credential theft and card-skimming campaigns. Below is every retail-sector breach LeakTrace has indexed.

98B+
Records Exposed
12430
Incidents
94+
Countries
+104%
Breach Velocity YoY
Browse by sector
All breaches Healthcare Finance Government Technology Retail Education Legal
Browse by year
2024 2025 2026 2026 Index

Retail & E-Commerce Data Breaches (12430 indexed)

high · retail · Oct 17, 2022

Metro AG (Germany)

Cyberattack disrupted retail giant's payment systems across European stores

View incident → Indexed 3 years, 9 months ago
medium · retail · Oct 5, 2022

Bob Evans

48K employee records exposed in data breach

View incident → Indexed 3 years, 9 months ago
high · retail · Sep 23, 2022

TAP Air Portugal

6,083,479 records exposed — Dates of birth, Email addresses, Genders, Names and 5 more

View incident → Indexed 3 years, 10 months ago
high · retail · Sep 8, 2022

Brand New Tube

349,627 records exposed — Email addresses, Genders, IP addresses, Passwords and 2 more

View incident → Indexed 3 years, 10 months ago
high · retail · Sep 2, 2022

7-Eleven

Customer mobile app accounts compromised in credential stuffing

View incident → Indexed 3 years, 10 months ago
medium · retail · Aug 24, 2022

Sephora

78K customer records exposed, $1.2M CCPA fine

View incident → Indexed 3 years, 11 months ago
critical · retail · Aug 17, 2022

SitePoint

1,021,790 records exposed — Bios, Email addresses, IP addresses, Names and 2 more

View incident → Indexed 3 years, 11 months ago
high · retail · Aug 11, 2022

The North Face

200K customer account records compromised in credential stuffing

View incident → Indexed 3 years, 11 months ago
high · retail · Aug 3, 2022

Tuned Global

985,586 records exposed — Email addresses, Names, Passwords, Phone numbers and 1 more

View incident → Indexed 3 years, 11 months ago
high · retail · Aug 2, 2022

Mecho Download

437,928 records exposed — Email addresses, IP addresses, Passwords, Usernames

View incident → Indexed 3 years, 11 months ago
high · retail · Jul 29, 2022

Battlefy

83,610 records exposed — Email addresses, Passwords, Usernames

View incident → Indexed 3 years, 11 months ago
critical · retail · Jul 20, 2022

Shadi.com

2,021,984 records exposed — Email addresses, Passwords

View incident → Indexed 4 years ago
high · retail · Jul 18, 2022

PPCGeeks

492,518 records exposed — Dates of birth, Email addresses, IP addresses, Passwords and 1 more

View incident → Indexed 4 years ago
high · retail · Jul 16, 2022

Famm

535,240 records exposed — Dates of birth, Email addresses, Genders, Names and 1 more

View incident → Indexed 4 years ago