Welhof
December 1, 2023
•[ leak, retail ]
In late 2023, the Dutch appliance store Welhof suffered a data breach. The incident exposed over 100k unique email addresses along with names, physical addresses and the value of purchases made. The data was provided to HIBP by a source who requested it be attributed to "oathnet.ru".
Staples
November 30, 2023
•[ hack, retail ]
American office supply retailer Staples takes down some of its systems after a cyberattack to contain the breach's impact and protect customer data.
Sparex
November 28, 2023
•[ ransomware, leak, malware ]
The Play ransomware gang adds Sparex to their leak site.
Noble Mountain Tree Farm
November 28, 2023
•[ ransomware, leak, malware ]
The Play ransomware gang adds Noble Mountain Tree Farm to their leak site.
Byfod
November 28, 2023
•[ ransomware, malware, retail ]
The Play ransomware gang adds Byfod to their leak site.
Berglund Management Group
November 22, 2023
•[ hack, misconfiguration, retail ]
Berglund Management Group files a notice of data breach with the Attorney General of Maine after discovering that an unauthorized party was able to gain access to portions of the company's computer network.
Autozone
November 21, 2023
•[ ransomware, malware, retail ]
AutoZone warns 184,995 customers that it suffered a data breach as part of the Clop MOVEit file transfer attacks.
Zadig & Voltaire
November 16, 2023
•[ leak, retail ]
In June 2024, a data brach sourced from French fashion brand Zadig & Voltaire was publicly posted to a popular hacking forum. The data included names, email and physical addresses, phone numbers and genders. When contacted about the incident, Zadig & Voltaire advised the incident had occurred more than 6 months ago and that "all measures were taken quickly".
Shufersal
November 16, 2023
•[ hack, retail ]
Hacktivists from SiegedSec claim to have allegedly compromised Shufersal supermarket chain's systems.
Smoothie King
October 31, 2023
•[ hack, retail ]
SK USA (Smoothie King) files a notice of data breach after discovering that an unauthorized party was able to access confidential information that had been entrusted to the company.
Ace Hardware
October 30, 2023
•[ hack, retail ]
Ace Hardware confirms that a cyberattack is preventing local stores and customers from placing orders as the company works to restore 196 servers.
Five Guys
October 27, 2023
•[ hack, retail ]
Five Guys discloses a security breach where hackers gained access to the email accounts of two employees.
Associated Wholesale Grocers
October 20, 2023
•[ ransomware, malware, retail ]
The PLAY ransomware group adds Associated Wholesale Grocers (AWG) to the list of their victims.
Faieta Motor Company
October 17, 2023
•[ ransomware, malware, retail ]
The Knight ransomware gang claims responsibility for a cyber attack to Faieta Motor Company.
BMW Munique Motors
October 15, 2023
•[ ransomware, malware, retail ]
The Knight ransomware group claims responsibility for a cyberattack on BMW Munique Motors, a Brazilian authorized BMW dealer.
BrickLink
October 15, 2023
•[ ransomware, malware, retail ]
BrickLink, an online Lego parts marketplace owned by Lego, is back online after several days of downtime due to a cybersecurity incident that apparently targeted some merchant accounts. The company said it received a "threat and ransom demand", presumably in regard to company or user data, leading it to shut down the site "out of an abundance of caution."
ORPAK Systems
October 14, 2023
•[ hack, retail ]
The hacktivist group CyberAv3ngers claims responsibility for a major cyberattack on ORPAK Systems, a prominent provider of gas station solutions in Israel, taking offline 200 gasoline pumps.
Kwik Trip
October 13, 2023
•[ ransomware, malware, retail ]
?Kwik Trip is impacted by a wide range of mysterious business disruptions that are indicative of a ransomware attack.
Laspesainfamiglia.coop
October 2, 2023
•[ ransomware, malware, retail ]
Laspesainfamiglia.coop is listed in the LockBit 3.0, ransomware leak site.
Acoustic Center
September 27, 2023
•[ ransomware, malware, retail ]
The Medusa ransomware gang claims to have hacked Acoustic Center, an Italian regional company for the distribution of hearing systems.
