JJ Meds
March 9, 2018
•[ financial, retail ]
JJ Meds, a medical marijuana delivery service in Canada, goes offline after having received an extortion demand.
160 Applebee's Restaurants
March 2, 2018
•[ hack, malware, retail ]
RMH Franchise Holdings reveals that PoS systems at the Applebee's network of restaurants were infected with a PoS malware. 160 restaurants are affected. The breach was discovered on February 13, and took place between November 23, 2017, and January 2, 2018.
Staybridge Suites Lexington Hotel
February 14, 2018
•[ financial, malware, retail ]
The Staybridge Suites Lexington Hotel is hit with what appears to be a point of sales data breach that occurred when several devices at the hotel were hit with malware.
Ron's Pharmacy Services
February 2, 2018
•[ leak, retail ]
Ron's Pharmacy Services notifies certain patients of the unauthorized access to certain limited pieces of patient information, including patient names, Ron's Pharmacy internal account numbers, and payment adjustment information.
National Stores, Inc.
January 23, 2018
•[ financial, malware, retail ]
National Stores, Inc. announces that it has been the victim of a malware attack, enabling unauthorized parties to access payment card information. It appears that payment cards used by customers at some National Stores locations between July 16 and December 11, 2017 may be involved.
Miracle-Ear
December 29, 2017
•[ hack, phishing, retail ]
Miracle-Ear Inc. says that 554 patient records have been compromised in a security breach of its e-mail system. The incident occurred Oct. 24, when "an unknown and unauthorized intruder" gained access to the e-mail account of an employee of Miracle-Ear's parent company Amplifon.
Beautyblender
January 5, 2018
•[ hack, malware, retail ]
Beautyblender notifies 3,673 individuals that their information might have been compromised after the discovery of a malware on its online shop.
Jewson
November 14, 2017
•[ hack, malware, retail ]
Builders merchant Jewson notifies 1,659 customers that their private information could have been exposed in a breach occurred late this summer. The breach happened after malicious code was implanted in the Jeson Direct website.
Loake Shoes
November 22, 2017
•[ hack, retail ]
Loake Shoes warns its customers to have been the victim of a cyber attack. Apparently the email server has been compromised even if no other details are disclosed.
Jeffree Star
December 10, 2017
•[ hack, leak, insider ]
Jeffree Star is the victim of a data hack, after a member of staff at cosmetics store Sephora allegedly hacks into her account and leaks sensitive information about his spending habits.
Tarte Cosmetics
October 25, 2017
•[ leak, misconfiguration, retail ]
Tarte Cosmetics exposes nearly two million customers' personal data to the public via two unsecured MongoDB databases. Unfortunately the gang Cru3lty get hold of the data, demanding 0.2 Bitcoins for recovering the database once the data had been deleted or encrypted.
Hyatt Hotels Corp.
October 12, 2017
•[ financial, malware, retail ]
Hyatt Hotels Corp reveals to have discovered unauthorized access to payment card information at certain Hyatt-managed locations worldwide between March 18, 2017 and July 2, 2017.
Pizza Hut
October 15, 2017
•[ hack, retail ]
Pizza Hut admits to have suffered a data breach, through which a hacker has stolen payment card details for a small number of clients.
CeX
August 29, 2017
•[ hack, retail ]
Second-hand electronics dealership CeX notifies 2 million customers that their personal information may have been compromised by hackers.
Zazzle
August 28, 2017
•[ hack, brute-force, retail ]
Zazzle sends an email to customers revealing that hackers in June used brute-force techniques to cycle through account usernames and passwords that were stolen from a breach of another unnamed site.
Loblaws
July 19, 2017
•[ hack, retail ]
According to an email sent out to Loblaws account holders, the security of a 'small number' of accounts has been compromised, marking the second time the company has suffered a security breach this year. Comprised websites include Loblaws.ca, Joefresh.com and Beautyboutique.ca.
Hotels
June 3, 2017
•[ leak, misconfiguration, retail ]
Hotels.com sends an email to some customers advising that their username, password, email address, and the last four digits of stored credit card numbers were potentially stolen last month (between may 22 and 29).
Kmart
May 31, 2017
•[ financial, malware, retail ]
For the second time in less than three years, Kmart Stores suffers a malware-based security breach of its store credit card processing systems.
Debenhams
May 5, 2017
•[ hack, malware, retail ]
Malware infects the backend systems used by British high street chain Debenhams, and steals 26,000 people's personal information in the process. The hack happened after compromising the systems at Ecomnova, the firm that runs the Debenhams Flowers business, for more than six weeks.
Blowout Cards
April 25, 2017
•[ hack, financial, retail ]
Blowout Cards issues a security alert to customers, warning that their payment card details may have been compromised after an attacker hacked its website and customers began reporting related card fraud.
