TraxNYC Data Breach
The 2025 TraxNYC data breach occurred in October 2025 when customer fulfillment and retail order databases from TraxNYC (traxnyc.com), a premier luxury jewelry and custom diamond retailer in New York City's Diamond District, were compromised and leaked online.
Exposed Data Types
6- Email addresses
- Names
- Phone numbers
- Physical addresses
- Purchases
- Financial transactions
About This Breach
What information was affected in the TraxNYC incident?
The leaked dataset (traxnyc.csv) contains rich customer transaction records detailing high-value jewelry acquisitions. The exposure impacts 121,322 unique customers across 182,326 transactions, exposing:
- Personal & Identity Information: Full customer first and last names.
- Contact Credentials: Canonical email addresses and telephone numbers.
- Physical Location & Delivery Data: Complete residential shipping addresses, states, and postal codes.
- Purchasing Records: Itemized luxury purchases including custom diamond pendants, gold chains, engagement rings, and order quantities.
- Financial Transaction Details: Order totals, shipping fees, tax assessments, order status, and transaction timestamps.
How many accounts were affected?
Rigorous RFC canonical parsing and deduplication confirmed 121,322 unique valid email addresses.
Technical analysis and security risks
Breaches involving high-net-worth retail and luxury jewelry expose customers to acute real-world security hazards. Exact home delivery addresses coupled with itemized luxury jewelry purchase amounts provide malicious actors with actionable intelligence for physical home burglary, targeted extortion, executive spear-phishing, and SIM-swapping.
Recommended actions for affected users
Customers of TraxNYC should:
- Maintain heightened vigilance regarding unexpected parcel notifications or insurance clearance calls.
- Secure primary email accounts with hardware security keys or authenticator apps (2FA).
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
