Salesfloor Alleged Data Exposure
The 2026 Salesfloor data breach occurred in January 2026 when clienteling and retail customer databases of Canadian retail SaaS company Salesfloor (salesfloor.net) were compromised and published online.
Exposed Data Types
5- Email addresses
- Names
- Phone numbers
- Physical addresses
- Purchases
About This Record
What information was compromised in the Salesfloor incident?
The leaked Elasticsearch/OpenSearch database dumps comprise customer profiles across major global luxury and apparel retailers (including Saks Fifth Avenue, Sunglass Hut, Puma, Sam Edelman, Stuart Weitzman, Pharmaprix, Fabletics). Verified exposed data classes include:
- Identity & Contact Details: Full customer names, email addresses, and phone numbers.
- Physical Addresses & Delivery Metadata: Full residential street addresses, cities, states, postal codes, and countries.
- Retailer CRM Metadata: Retailer customer IDs, CRM cross-references, marketing subscription flags, and customer tags.
How many accounts were affected?
Standardized RFC 5322 ASCII canonical verification and test domain elimination confirmed 5,700,550 unique valid email addresses.
Security advisory & personal identity protection
The disclosure of full residential addresses alongside phone numbers and luxury purchase metadata creates high risks of impersonation, targeted phishing, and social engineering. Impacted consumers should:
- Be cautious of unsolicited delivery confirmations, refund inquiries, or retail promotion messages.
- Verify any unexpected account change or payment requests directly through official retailer apps or portals.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
