Smith Dollar Confirms 2026 Data Breach Affecting Customer Data

Smith Dollar, a prominent discount retailer with extensive operations in Indiana and the broader Midwest, filed a data breach notification with Indiana authorities on September 28, 2026. This filing disclosed a data security incident that the company indicated occurred on March 31, 2026. The investigation into the incident is ongoing, with Smith Dollar stating it is actively monitoring the situation.

The publicly reported details from this filing indicate that the breach exposed a range of customer personal information. The categories of data reported as compromised include Full Name, Email Address, Mailing Address, Phone Number, Password or Credential Hash, Payment Card Information, Purchase and Order History, and Loyalty Account Details.

Such incidents typically involve unauthorized access to a company's systems, often through methods like exploiting software vulnerabilities or credential-based attacks. Retailers and e-commerce platforms like Smith Dollar manage vast repositories of customer data, which can make them high-value targets for cybercriminals seeking to exfiltrate sensitive records.

Individuals who may be affected by this data exposure should take steps to safeguard their personal and financial information. It is advisable to closely monitor all financial accounts for any unusual or unauthorized activity and to consider changing the password for your Smith Dollar account. If that password is used on other online services, it should be updated there as well, using a strong, unique password for each account.

Maintaining vigilance against phishing attempts, which may leverage exposed information to trick individuals into revealing further sensitive data, is also important. Regularly reviewing credit reports for any unfamiliar accounts or inquiries can help in detecting potential identity theft or fraud stemming from compromised data.