Ticketmaster (Live Nation)
560M customer records exposed in Snowflake-linked breach
E-commerce platforms, point-of-sale systems, loyalty programs, and customer databases remain frequent targets for credential theft and card-skimming campaigns. Below is every retail-sector breach LeakTrace has indexed.
560M customer records exposed in Snowflake-linked breach
1.1M seller records exposed via misconfigured analytics endpoint — shop revenue data leaked
RansomHub stole client data from world's largest auction house — $6.2B in 2024 sales
INC Ransom group compromised lease-to-own retailer systems across 1,300 locations
1.5M marketplace records compromised
670K customer and pet records stolen
LockBit ransomware forced closure of 79 stores across Western Canada — employee data stolen
Ransomware forced closure of all 79 stores for over a week — employee data exposed
Ransomware shut down 79 stores for a week across Western Canada
94,584 records exposed — Dates of birth, Email addresses, Names, Passwords and 4 more
780K employee records exposed via compromised HR vendor system — payroll data stolen
2,842,669 records exposed — Email addresses, Names, Phone numbers, Physical addresses
1.5M customer records exposed via compromised regional e-commerce platform — delivery addresses
55,971 records exposed — Email addresses, IP addresses, Passwords, Usernames
75K customer payment card records exposed via point-of-sale malware across 400 stores
4,426,879 records exposed — Dates of birth, Email addresses, IP addresses, Names and 3 more
340K customer records compromised
1,348,407 records exposed — Email addresses, IP addresses, Names, Phone numbers and 1 more
560K customer and pet records stolen via credential stuffing
Major retailer breach affecting millions of customers across Chile, Argentina, Peru
43,299 records exposed — Email addresses, Passwords
539K current and former employee records exposed — SSNs, bank account details, health plan data
380K guest reservation records exposed — fourth major breach in 6 years
2.8M customer records exposed via compromised vendor — addresses and email addresses