Hibbett Retail, Inc. data breach

Clerk's notes

Hibbett Retail, Inc., a prominent sporting goods and athletic footwear retailer, filed a data breach report in California on September 8, 2026. This incident, which first occurred on April 22, 2026, involved the reported exposure of sensitive customer data through unspecified means. Given the company's extensive online operations and loyalty programs, it handles a significant volume of consumer information.

The compromised data categories reported include Full Name, Email Address, Password or Credential Hash, Mailing Address, Purchase and Order History, Payment Card Information, Phone Number, and Loyalty Account Details. The exposure of these specific types of information can create various risks for individuals, ranging from financial issues to account takeovers across different platforms.

For those affected, the exposure of these data points means potential threats like unauthorized transactions using compromised payment card information. Additionally, email addresses and password hashes can be used in credential stuffing attacks, where criminals try to use your login details on other websites. Your mailing address and phone number could also be used for targeted phishing or scam attempts.

Under California's robust data privacy laws, companies like Hibbett Retail, Inc. are obligated to implement and maintain reasonable security measures to protect customer data. A breach of this nature suggests potential failures in these security protocols, which could lead to legal accountability for the company in failing to adequately safeguard consumer information from foreseeable cyber threats.

If you have received a formal data breach notification letter from Hibbett Retail, Inc., it confirms that your personal information was part of this incident. This notification is a crucial step in understanding your rights and options. We are currently reviewing potential claims on behalf of individuals affected by the Hibbett Retail data breach and invite you to request a free case review to understand if your situation warrants further action. There is no cost to you for this initial review, and our work is contingency-based, meaning you would not pay attorney fees unless we recover compensation on your behalf.

If a notification letter about this breach reached you, see every California data breach on file or browse all cases.