Millions of Hot Topic customers have been notified that their personal information was compromised during a data breach in October at the American retailer.
The breach notification service, Have I Been Pwned (HIBP), reported that 57 million customers were affected, with stolen data including email addresses, physical addresses, phone numbers, purchases, genders, dates of birth, and partial credit card information.
Hot Topic, which operates over 640 stores in the U.S., has not yet confirmed the breach or responded to inquiries from TechCrunch. The breach occurred on October 19 and was claimed by a threat actor known as “Satanic” on October 21, who allegedly stole 350 million user records from Hot Topic and its affiliated brands.
The hacker initially demanded a ransom from Hot Topic to remove the stolen information but is now offering to sell the database for a lower price. The exact method of the security incident leading to the breach is still unknown, but it may have involved stolen credentials used to access Hot Topic’s cloud environments.
As of now, Hot Topic has not informed customers or authorities about the breach.
