Hibbett Retail Reports Data Security Incident in Washington Filing

Hibbett Retail, Inc. submitted a data breach notification to the Washington Attorney General on September 8, 2026. The official filing indicates a data security incident occurred, though the specific nature of how the breach happened was not detailed in the public record at the time of the report.

The reported exposed data categories include Full Name, Email Address, Password or Credential Hash, Mailing Address, Purchase and Order History, Payment Card Information, Phone Number, and Loyalty Account Details. These data types are typically collected by retail companies for transactions, account management, and customer programs.

While the investigation is ongoing, data breaches in the retail sector frequently result from unauthorized access to digital systems, such as e-commerce platforms or customer databases. Such incidents aim to extract sensitive customer information stored by the company.

If you receive a notification from Hibbett Retail, Inc. concerning this incident, it is important to carefully review the information provided. The notice should outline specific details relevant to your account and recommend immediate actions.

To help protect your information, consider changing any passwords that are similar to your Hibbett Retail, Inc. account password, especially if you have reused them on other websites. Regularly monitor your financial account statements for any unauthorized activity or suspicious transactions. Placing a fraud alert with credit reporting agencies can also provide an additional layer of security by flagging potential misuse of your identity.