All Breaches
November 27, 2013 Verified Sensitive Record Retail

Target Data Breach

During the 2013 holiday shopping season, Target Corporation, one of the largest retail department store chains in the United States, suffered one of the most consequential cyberattacks in retail history.

110 Million
Affected People
7
Data Types
Critical
Severity
Oct 27, 2026
Last updated

Protect Yourself

Check whether you were affected by this breach

Check my email

Exposed Data Types

7
  • Customer names
  • Credit and debit card numbers
  • Payment card security codes
  • PIN codes
  • Email addresses
  • Phone numbers
  • Mailing addresses

About This Breach

Threat actors gained access to Target's internal network using compromised credentials from a third-party HVAC vendor, installing custom RAM-scraping malware across retail point-of-sale (POS) systems. The incident compromised approximately 40 million credit and debit card records along with the personal contact information of 70 million individuals, totaling 110 million records exposed.

Verification and editorial method

LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.

Report missing or incorrect information