All Breaches
October 19, 2024 Verified Sensitive Record Retail and fashion

Hot Topic Data Breach

The 2024 Hot Topic-attributed data collection has not been publicly confirmed by the operator.

56.9 Million
Email Identifiers
9
Data Types
Critical
Severity
Oct 9, 2026
Last updated

Protect Yourself

Check whether you were affected by this breach

Check my email

Exposed Data Types

9
  • Dates of birth
  • Email addresses
  • Genders
  • Names
  • Partial credit card data
  • Phone numbers
  • Physical addresses
  • Purchases
  • Salutations

About This Breach

A public breach source reports 56,904,909 account or email records associated with Hot Topic, BoxLunch, and Torrid and the collection-level classes dates of birth, emails, genders, names, partial card data, phones, physical addresses, purchases, and salutations. This is not a count of distinct people, current customers, raw rows, or people who had every field present.

October 19, 2024 is a public breach source and third-party reporting chronology, not an operator-confirmed attack or discovery day. The partial-card class applies to the public breach source-indexed dataset. Claims of encrypted card numbers in an alleged broader dataset should not be added without reconciling dataset versions, while a public breach source's class list also does not prove that no broader variant contained full or encrypted card numbers or other fields. No field should be assumed to co-occur with every email.

No Hot Topic data is locally searchable. This record does not identify anyone as a Hot Topic, BoxLunch, or Torrid customer, purchase or loyalty participant, person of a particular age or gender, or card holder. Brand relationship, purchase history, address, phone, card fragment, field co-occurrence, account compromise, and misuse cannot be inferred. Passwords are not among a public breach source's listed classes for this dataset.

Verification and editorial method

LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.

Report missing or incorrect information