Hot Topic / BoxLunch / Torrid
57M customer records stolen — largest retail breach of 2024, sold on dark web forums
Retail & E-Commerce Data Breaches (595 indexed)
Hot Topic / BoxLunch
350M customer records exposed in credential stuffing
AlpineReplay
898,681 records exposed — Dates of birth, Email addresses, Genders, Names and 3 more
Tractor Supply Company
480K customer records exposed via compromised e-commerce partner integration
Party City Holdings
850K customer records exposed — e-commerce platform breach exposed payment card data
Metro Inc (grocery)
890K customer records stolen in credential stuffing
Mercado Libre (Argentina)
1.8M user records stolen in targeted attack
Central Tickets
722,860 records exposed — Device information, Email addresses, IP addresses, Names and 3 more
Games Box
1,439,354 records exposed — Ages, Email addresses, Genders, Passwords and 1 more
Bath & Body Works
560K loyalty program member records exposed via API vulnerability in rewards platform
Aritzia Fashion (Canada)
420K customer records exposed via compromised e-commerce platform — payment data included
Boulanger (France)
27M customer records stolen from French electronics retailer
AB InBev (Belgium)
450K employee and distributor records stolen
Market Moveis
28,220 records exposed — Email addresses, Names
Sport 2000
3,189,643 records exposed — Dates of birth, Email addresses, Names, Phone numbers and 3 more
IHG Hotels & Resorts
380K loyalty member records exposed via compromised API in mobile booking app
LDLC
1,266,026 records exposed — Email addresses, Names, Phone numbers, Physical addresses and 1 more
DoorDash (2024)
4.9M customer delivery records exposed via compromised third-party payment processor
Lazada (Southeast Asia)
890K customer records exposed
Tim Hortons (parent RBI)
1.1M loyalty program records exposed
Nordstrom
340K customer loyalty records exposed
GameStop
340K customer records exposed — payment card data and Power Up Rewards member information
Avis Budget Group
299K customer records accessed via business application vulnerability
LuLu
2,796,835 records exposed — Email addresses, Names, Passwords, Phone numbers and 2 more