PetSmart
March 6, 2024
•[ hack, brute-force, retail ]
Pet retail giant PetSmart warns some customers their passwords were reset due to an ongoing credential stuffing attack attempting to breach accounts.
Pepco Group
February 27, 2024
•[ financial, retail ]
European discount retailer Pepco Group reveals that its Hungarian business has lost a significant amount of money (15.5 Million) to cybercriminals.
Chula Book
January 22, 2024
•[ leak, retail ]
An individual known as Naraka lists a data dump for sale on breachforums.is, featuring one of Thailand's largest bookstores called Chula Book. The breach affects over 160,000 users.
Jason's Deli
January 19, 2024
•[ hack, brute-force, retail ]
Jason's Deli warns of a data breach in notifications sent to customers of its online platform stating that their personal data was exposed in credential stuffing attacks.
Lush
January 11, 2024
•[ ransomware, malware, retail ]
Lush, the privately-owned British cosmetics retailer is currently responding to a cyber security incident. Few week later the Akira ransomware gang claims responsibility for the attack.
Coop Sverige
December 22, 2023
•[ ransomware, malware, retail ]
Coop Sverige is hit with a ransomware attack, whose responsibility is claimed by the Cactus ransomware gang.
Byfod
November 28, 2023
•[ ransomware, malware, retail ]
The Play ransomware gang adds Byfod to their leak site.
Sparex
November 28, 2023
•[ ransomware, leak, malware ]
The Play ransomware gang adds Sparex to their leak site.
Staples
November 30, 2023
•[ hack, retail ]
American office supply retailer Staples takes down some of its systems after a cyberattack to contain the breach's impact and protect customer data.
Noble Mountain Tree Farm
November 28, 2023
•[ ransomware, leak, malware ]
The Play ransomware gang adds Noble Mountain Tree Farm to their leak site.
Undisclosed franchise partner
December 7, 2023
•[ ransomware, malware, retail ]
Billion-dollar shoe seller Aldo says that a recent claim by the notorious LockBit ransomware gang was related to one of the company's franchise partners.
Berglund Management Group
November 22, 2023
•[ hack, misconfiguration, retail ]
Berglund Management Group files a notice of data breach with the Attorney General of Maine after discovering that an unauthorized party was able to gain access to portions of the company's computer network.
Autozone
November 21, 2023
•[ ransomware, malware, retail ]
AutoZone warns 184,995 customers that it suffered a data breach as part of the Clop MOVEit file transfer attacks.
Shufersal
November 16, 2023
•[ hack, retail ]
Hacktivists from SiegedSec claim to have allegedly compromised Shufersal supermarket chain's systems.
Ace Hardware
October 30, 2023
•[ hack, retail ]
Ace Hardware confirms that a cyberattack is preventing local stores and customers from placing orders as the company works to restore 196 servers.
Smoothie King
October 31, 2023
•[ hack, retail ]
SK USA (Smoothie King) files a notice of data breach after discovering that an unauthorized party was able to access confidential information that had been entrusted to the company.
Five Guys
October 27, 2023
•[ hack, retail ]
Five Guys discloses a security breach where hackers gained access to the email accounts of two employees.
Associated Wholesale Grocers
October 20, 2023
•[ ransomware, malware, retail ]
The PLAY ransomware group adds Associated Wholesale Grocers (AWG) to the list of their victims.
Faieta Motor Company
October 17, 2023
•[ ransomware, malware, retail ]
The Knight ransomware gang claims responsibility for a cyber attack to Faieta Motor Company.
BrickLink
October 15, 2023
•[ ransomware, malware, retail ]
BrickLink, an online Lego parts marketplace owned by Lego, is back online after several days of downtime due to a cybersecurity incident that apparently targeted some merchant accounts. The company said it received a "threat and ransom demand", presumably in regard to company or user data, leading it to shut down the site "out of an abundance of caution."
