Hot Topic data breach
Was I affected?
Hot Topic was reported to have a breach affecting about 56.9 million email addresses, exposing names, email addresses, phone numbers and addresses. You may be affected if you had an online account or rewards membership with Hot Topic, BoxLunch or Torrid; check your email on Have I Been Pwned.
| Announced | Nov 11, 2024 |
|---|---|
| When it happened | October 2024 |
| Email addresses exposed | 56.9 million |
| Data exposed | Names, Email addresses, Phone numbers, Addresses, Dates of birth, Payment card numbers and Other details |
| Status | Reported by the press; not confirmed by the company |
What happened
Data on about 57 million Hot Topic shoppers (also covering Box Lunch and Torrid) was put up for sale in late 2024 and loaded into Have I Been Pwned in November. It contained emails, names, addresses, phone numbers, birth dates, purchase history and partial card details (card type, expiry, last four digits). Researchers tied the theft to stolen cloud credentials; Hot Topic did not publicly detail the incident.
What should I do?
- Change your Hot Topic password and any other account that uses the same password, and turn on two-step verification.
- Treat emails, texts and calls that mention Hot Topic, BoxLunch or Torrid orders as suspect; don't click links or share codes, and contact the company through its official app or website.
- Watch your card statements; partial card data can make phishing calls more convincing.
Check whether your email address is in this breach on Have I Been Pwned (breach data from haveibeenpwned.com, CC BY 4.0).
Check the other services you use →
Sources
- Millions of Hot Topic customers impacted by data breach · SecurityWeek (news)
- Hot Topic data breach thought to have hit nearly 54 million customers · TechRadar (news)