Hibbett Retail Data Breach: Understanding Your California Notification

Hibbett Retail, Inc., a prominent sporting goods and athletic footwear retailer, reported a data security incident to the California Attorney General on September 8, 2026. This report indicates that customer information was accessed without authorization during an incident that occurred on or about April 22, 2026.

The breach involved various categories of customer personal information. If you received a notification letter from Hibbett Retail, your exposed data may include your Full Name, Email Address, Password or Credential Hash, Mailing Address, Purchase and Order History, Payment Card Information, Phone Number, and Loyalty Account Details.

Exposure of these data types can lead to significant risks for those affected. Bad actors may use this information for fraudulent transactions, to attempt to access other online accounts using your compromised credentials, or to send sophisticated phishing emails. It is important to be vigilant for any unusual activity across your accounts and communications.

If you received a data breach notification letter from Hibbett Retail, Inc., it's a formal acknowledgment that your private information was compromised due to security shortcomings. Review the letter carefully to understand what specific data types were affected in your case. Consider monitoring your accounts for suspicious activity and changing relevant passwords, especially if you reuse them across multiple services.

Under California law, companies like Hibbett Retail, Inc. have a duty to safeguard consumer data through reasonable security measures. When a breach occurs, individuals may have legal recourse. Our firm is currently investigating claims related to the Hibbett Retail data breach and offers a free, no-obligation case review to help you understand your situation and potential next steps.