Hibbett Retail Reports Data Incident to Washington State

Hibbett Retail, Inc., a retailer specializing in sporting goods and athletic footwear, filed a report with the Washington Attorney General regarding a data security incident on September 8, 2026. The specific details of how the breach occurred remain unspecified at this time, with the investigation noted as ongoing.

The public filing indicates that multiple categories of customer data were compromised. These include Full Name, Email Address, Password or Credential Hash, Mailing Address, Purchase and Order History, Payment Card Information, Phone Number, and Loyalty Account Details.

Exposure of such data can lead to various risks for affected individuals. For example, Payment Card Information could be used for unauthorized transactions, while Email Address and Password or Credential Hash combinations might be exploited in credential stuffing attacks on other online accounts. Individuals may also experience an increase in unsolicited communications or phishing attempts.

To help mitigate potential risks, individuals who may be affected by this incident are advised to monitor their financial and online accounts closely for any suspicious activity. It is also a general best practice to change passwords for any online services where the same credentials were used, particularly for their Hibbett Retail account. Maintaining vigilance against phishing emails or unexpected communications is also recommended.

This documentation is based on information made public through official regulatory filings. The investigation into the Hibbett Retail incident is noted as being in a monitoring phase by the reporting entity.