Hot Topic & Torrid Data Breach – Class Action Investigation
Chimicles Schwartz Kriner & Donaldson-Smith is investigating a potential class action relating to a data breach affecting Hot Topic, Inc., (“Hot Topic”) a fast fashion retail company that operates retail stores including Hot Topic, Box Lunch, and Torrid.
According to recent news reports, beginning on or around October 21, 2024, a hacker recently posted a large cache of data on the dark web containing personally identifying information (or “PII”) of potentially 350 million customers of Hot Topic, Box Lunch, and Torrid.
The alleged hacker claims they were able to steal the information by hacking an employee’s computer at third-party retail analytics firm Robling and stealing credentials needed to access several cloud-based servers, including Snowflake, where the data was stored. Access to these cloud-based servers was made possible due to these Hot Topic’s cloud-based server account(s) lacking any kind of multi-point authentication.
The information that may have been compromised as result of the breach, may include, but not limited to the following: name, email address, mailing address, date of birth, payment card information including last four digits of customers’ credit card number, card type, hashed expiration dates, and account holder names.
Why is it Important to you?
The data breach, if confirmed, could have severe implications for the affected users, leading to potential identity theft, financial fraud, and further cyber attacks. The hacker group’s bold move to put this data on sale goes on to show the growing menace of cybercrime and the increasing sophistication of these cyber adversaries.
If you believe your personal information may have been compromised as a result of this breach, please contact one of our data breach attorneys by filling-out the form provided below.
(*) Indicates required field: When communicating with us through this site or otherwise in connection with a matter for which we do not already represent you, your communication may not be treated as privileged or confidential, and does not create an attorney-client relationship between you and our Firm.
