Cardi's Department Store Inc. data breach

Clerk's notes

Cardi's Department Store Inc., a regional retail enterprise, officially reported a data breach incident to the Maryland Attorney General on March 10, 2025. This case is currently under monitoring, indicating an ongoing review of the circumstances surrounding the security lapse at the prominent merchant.

The breach at Cardi's Department Store Inc. has been identified as exposing several categories of sensitive customer data. This includes Full Name, Email Address, Mailing Address, Phone Number, Payment Card Information, Purchase and Order History, and Password or Credential Hash.

The exposure of these data types poses considerable risks to affected individuals. Compromised Payment Card Information can lead to unauthorized charges, while the combination of Full Name, Email Address, Mailing Address, Phone Number, Purchase and Order History, and Password or Credential Hash can enable highly targeted phishing scams, credential stuffing attacks, and other forms of identity-related harm.

As a company that routinely handles extensive pools of customer data, Cardi's Department Store Inc. is legally obligated to implement robust security measures to protect this information under Maryland consumer protection statutes. The occurrence of this security incident suggests a potential failure to maintain adequate safeguards, raising questions about the company's adherence to its data protection duties.

If you have received a data breach notification letter from Cardi's Department Store Inc., it confirms that your personal information was part of this compromise. Understanding the specifics of what happened and your potential rights is an important step. You can request a free case review to learn more about the situation and explore what legal avenues may be available to you.

If a notification letter about this breach reached you, see every Maryland data breach on file or browse all cases.