Attorneys at Almeida Law Group are investigating whether a class action lawsuit can be filed on behalf of individuals affected by a possible Claire’s Inc. data breach. According to dark web monitoring sources, a hacker group calling itself Dark Project claimed responsibility for a cyberattack on Claire’s Inc. in a post first observed in October 2026, alleging it had gained access to internal company systems. As of this writing, Claire’s Inc. has not issued a public confirmation of the incident, and the exact scope of any exposed data remains unknown. If you believe you were affected, contact Almeida Law Group.
About Claire’s Inc.
Claire’s Inc. is an American retailer of accessories, jewelry, and toys primarily aimed at tween and teen girls, widely known for its ear-piercing services. Founded in 1961 and historically headquartered in Hoffman Estates, Illinois, the company operated over 2,750 stores worldwide at its peak. Claire’s filed for Chapter 11 bankruptcy in 2018 and again on August 6th, 2025, listing between $1 billion and $10 billion in both assets and liabilities. Its North American business was subsequently sold for $140 million to Ames Watson Capital, and the company was in the process of relocating its headquarters to Rosemont, Illinois, with an expected opening in early 2027.
What Happened?
On October 12th, 2026, the ransomware group Dark Project listed Claire’s Inc. on its dark web leak site, as tracked by Ransomware.live. The posting alleges that a cyberattack disrupted Claire’s operations and compromised customer and employee data. No specific data types, data volume, or ransom demand were disclosed in the posting. No independent confirmation from Claire’s Inc., law enforcement, or any regulatory agency has been found. A monitoring service, HackNotice, also noted Claire’s appearing in breach data streams on October 12th, 2026, though that report likewise does not constitute independent confirmation of the underlying claim.
Dark Project is an emerging ransomware group first observed in August 2026 that operates a double-extortion model — claiming to steal data before encrypting systems and threatening to publish what was taken. Security researchers characterize the group’s targeting as opportunistic and affiliate-driven, focused on organizations with weak perimeter security. The group has claimed approximately 30 to 37 victims across U.S. and international industries. No major cybersecurity organizations, including CISA, the FBI, or Mandiant, have published detailed public attribution for Dark Project.
Claire’s also has a prior confirmed breach history. In 2020, the company’s e-commerce website was targeted in a Magecart web-skimming attack in which malicious JavaScript was injected around March–April 2020 to capture customer payment card information at checkout. That breach was discovered on June 12th, 2020, by cybersecurity firm Sansec. A class action lawsuit — Rossi v. Claire’s Stores, Inc., Case No. 1:20-cv-05090 (N.D. Ill.) — was filed alleging delayed notice and negligence, and was settled for up to $350,000.
Key Facts at a Glance
- Company or Organization: Claire’s Inc.
- Industry: Retail & E-Commerce (Jewelry, Accessories, and Ear Piercing Services)
- Location: Hoffman Estates, Illinois (relocating to Rosemont, Illinois)
- Incident type: Ransomware claim (double-extortion) attributed to Dark Project
- Date claim first observed: October 12th, 2026
- Prior breach: 2020 Magecart payment card skimming attack; class action settled for $350,000
- Litigation status: No litigation connected to the current Dark Project claim has been identified
- Source: Ransomware.live – Claire’s Inc. claimed by Dark Project; HackNotice – Claire’s Inc.; Darkfield – Dark Project ransomware group profile; isMalicious – Dark Project ransomware IOCs & TTPs; DataBreaches.net – Claire’s $350K settlement
What Should You Do?
Even though Claire’s Inc. has not confirmed this incident, it is a good time to take protective steps if you have shopped at Claire’s or provided personal information to the company. Consider placing a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — to make it harder for anyone to open accounts in your name. Monitor your financial accounts and credit reports closely for any unfamiliar activity, and obtain your free annual credit reports at AnnualCreditReport.com. If you become a victim of identity theft or fraud, report it and get a personalized recovery plan at IdentityTheft.gov.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
