Disclosure tracker › Retail disclosures
Intelligence · Disclosure tracker
Retail disclosures
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,292
Disclosures in the tracker, all years
2,005
Of those, indexed in 2026
49
Added in October
9
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 17 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
1,976 results · Retail disclosures. Clear filters
Medium13 Oct 2026
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
The South African retail giant The Foschini Group (TFG) disclosed a cyberattack that disrupted IT systems at three of its British fashion brands, leaving some services unavailable.
13 Oct 2026
Medium9 Oct 2026
Neogen
Retail · 435,963 records
435,963 records exposed, Email addresses, Employers, Job titles, Names and 3 more
9 Oct 2026
Medium7 Oct 2026
CyrusOne
Retail · 373,460 records
373,460 records exposed, Email addresses, Employers, Job titles, Names and 3 more
7 Oct 2026
Medium5 Oct 2026
Ukraine grocery chain ATB
Retail · Records not stated
Ukraine’s largest grocery store chain, ATB, confirmed that it was hit by a cyberattack after hackers posted an extortion demand on its website.
5 Oct 2026
Critical1 Oct 2026
Napoleon Perdis
Retail · Records not stated
339,055 customer records exposed via vendor Retail Express
1 Oct 2026
High1 Oct 2026
ASOS
Retail · Records not stated
Retailer data breach exposed more personal details than initially disclosed; BBC contacted by hackers
1 Oct 2026
High1 Oct 2026
ASOS
Retail · Records not stated
Hackers compromised third-party communication platform; breach exposed more personal details than initially reported including contact information
1 Oct 2026
Critical1 Oct 2026
Lawson
Retail · 2,155,345 records
2,155,345 records of personal information leaked due to unauthorized access to Lawson IDs
1 Oct 2026
High1 Oct 2026
ASOS
Retail · Records not stated
Third-party communication platform compromised; hackers accessed customer personal data beyond basic contact details
1 Oct 2026
Critical29 Sep 2026
Organisation not named
Retail · 68,000,000 records
The disclosure as indexed does not name the organisation.
Andrey Mihayloff reports: Dodo Pizza has confirmed a cyberattack on its IT systems, admitting that attackers may have accessed personal data of a portion of its customer base. The company reported the breach to…
29 Sep 2026
Critical25 Sep 2026
Canadian Tire
Retail · 38,000,000 records
38 million accounts compromised in data breach
25 Sep 2026
High25 Sep 2026
Mizuno
Retail · Records not stated
Confirmed data breach after 2024 ransomware attack; customer data exposed
25 Sep 2026
Critical25 Sep 2026
Coupang
Retail · 33,700,000 records
33.7 million accounts exposed, resulted in $409 million South Korea fine
25 Sep 2026
Critical24 Sep 2026
Coupang
Retail · 33,700,000 records
Data breach exposed 33.7 million accounts, resulted in $409 million South Korea fine
24 Sep 2026
Medium23 Sep 2026
Lovesac
Retail · Records not stated
Data breach confirmed following ransomware attack
23 Sep 2026
High23 Sep 2026
Renault Group
Retail · Records not stated
UK customer data stolen in third-party breach affecting auto industry
23 Sep 2026
High23 Sep 2026
Lands' End
Retail · Records not stated
Data breach impacted clothing retailer customers; case settled with compensation
23 Sep 2026
High22 Sep 2026
Lovesac
Retail · Records not stated
Data breach confirmed after ransomware attack
22 Sep 2026
High22 Sep 2026
Estée Lauder
Retail · Records not stated
Data breach via Oracle E-Business flaw
22 Sep 2026
Critical22 Sep 2026
Canadian Tire
Retail · 42,000,000 records
2025 data breach exposed 42 million records
22 Sep 2026
Critical22 Sep 2026
Coupang
Retail · 33,700,000 records
Data breach exposed 33.7 million accounts, resulting in $409 million fine from South Korea
22 Sep 2026
Medium21 Sep 2026
BigCommerce
Retail · Records not stated
Ecommerce platform BigCommerce has alerted multiple merchants to data breaches after attackers compromised credentials for third-party Ribon applications and used them to inject malicious scripts into online stores.
21 Sep 2026
High21 Sep 2026
Estée Lauder
Retail · Records not stated
Data breach via Oracle E-Business Suite flaw
21 Sep 2026
High21 Sep 2026
Home Depot
Retail · Records not stated
Leaked private GitHub token gave unauthorized access to internal systems for over a year
21 Sep 2026
Were you affected?