Hot Topic, Torrid, BoxLunch Data Breach?

Attorneys working with ClassAction.org are looking into whether a class action lawsuit can be filed in light of reports of a possible Hot Topic data breach.

As part of their investigation, they need to hear from customers of Hot Topic and its two affiliates, Torrid and BoxLunch.

A prominent cybersecurity vendor is reporting that a hacker has likely stolen information on millions of Hot Topic customers as part of the "largest retail breach in history." 

The threat actor behind the reported attack, going by the alias of "Satanic," claims to have acquired personal data on 350 million shoppers (including names, emails, addresses, phone numbers, birth dates and payment data) and is offering it for sale on the dark web, according to the report. Notably, Hot Topic founded Torrid and BoxLunch, and it appears data on customers from all three brands is impacted. Contact information was likely provided as part of a rewards program. 

Researchers at cybersecurity firm Hudson Rock believe the alleged Hot Topic data breach to be credible and suspect the incident stems from malware being installed on the computer of an employee at a third-party retail analytics firm. 

If you are a customer of Hot Topic, Torrid or BoxLunch, attorneys want to hear from you. You may be able to start a class action lawsuit to recover compensation for loss of privacy, time spent dealing with the alleged breach, out-of-pocket costs, and more.

A successful case could also force Hot Topic to ensure it takes proper steps to protect the information it was entrusted with.