Hibbett Retail, Inc. data breach

Clerk's notes

Hibbett Retail, Inc., a prominent sporting goods and athletic footwear retailer, filed a data breach notification with the Texas Attorney General on September 9, 2026. This filing acknowledges a security incident that occurred on or about April 22, 2026. The matter is currently under monitoring, indicating an ongoing assessment of the breach's scope and impact.

The compromised data categories reported include Full Name, Email Address, Password or Credential Hash, Mailing Address, Purchase and Order History, Payment Card Information, Phone Number, and Loyalty Account Details. These types of personal information, if accessed by unauthorized parties, can lead to various forms of misuse and financial risk for affected individuals.

Exposure of a Full Name and Mailing Address could enable targeted phishing attempts or identity theft. Should Payment Card Information have been compromised, there is a risk of unauthorized transactions and financial fraud. Furthermore, compromised Password or Credential Hashes pose a threat of credential stuffing attacks, where attackers use breached login details to access other online accounts an individual might hold, while loyalty account details could be exploited for unauthorized redemptions.

Companies like Hibbett Retail, Inc. have a legal obligation under state and federal regulations, such as the Texas Identity Theft Enforcement and Protection Act and Section 5 of the FTC Act, to implement reasonable security measures to protect customer data. A data breach suggests that these safeguards may have been insufficient, potentially leading to a failure in their duty to secure sensitive information.

Receiving a formal data breach notification from Hibbett Retail, Inc. confirms that your personal information was affected by this incident. This notification establishes the basis for understanding your rights. Our firm is actively evaluating this case, and we encourage individuals who received such a letter to request a free case review to explore their specific situation.

If a notification letter about this breach reached you, see every Texas data breach on file or browse all cases.