Hibbert Retail, Inc. Data Breach Investigation

Data Breach Blog

Data Breach

Hibbert Retail, Inc. Data Breach Investigation

Almeida Law Group Calendar Icon

Date of data breach:

September 9, 2026

by: Almeida Law Group

Almeida Law Group is investigating a data breach at Hibbert Retail, Inc. If you were affected, contact Almeida Law Group.

About Hibbert Retail, Inc.

Hibbert Retail, Inc. — more commonly spelled Hibbett Retail, Inc., with the Vermont Attorney General filing likely containing a transcription error — is an athletic-inspired fashion retailer formerly known as Hibbett Sporting Goods, Inc. Headquartered in Birmingham, Alabama, the company operates Hibbett, City Gear, and Sports Additions specialty stores selling sneakers, athletic footwear, apparel, and equipment from brands such as Nike, Jordan, and Adidas. As of May 2024, it operated 1,169 retail stores across 36 states and is now a wholly owned subsidiary of JD Sports Fashion plc following a roughly $1.1 billion acquisition completed in July 2024. Because the company collects personal information — including Social Security Numbers — from customers or employees, a breach of that data carries meaningful identity theft risk.

What Happened?

Hibbert Retail, Inc. was listed in a Vermont Attorney General breach report summary dated September 8th, 2026. The filing identifies the organization as an “Other Commercial” entity and reports that Social Security Numbers were among the categories of data involved. No breach date, discovery date, affected-person count, notification date, or breach vector was reported in the filing. No independent media coverage, company-issued breach notice, or ransomware group claim related to this specific incident was found in public sources as of the research date.

As a separate and unrelated matter, Hibbett Retail, Inc. previously settled a FACTA class action lawsuit — Cliatt v. Hibbett Retail Inc., Case No. CV-2022-90008, Circuit Court of Barbour County, Alabama — for up to $6 million over allegations that the company printed excessive payment card digits on point-of-sale receipts between December 2020 and February 2022. That prior matter did not involve Social Security Numbers and is distinct from the incident reported here.

Key Facts at a Glance

What Should You Do?

If your Social Security Number was exposed in this breach, act promptly to protect yourself. Place a fraud alert or credit freeze with each of the three major credit bureaus — Equifax, Experian, and TransUnion — to make it harder for someone to open new accounts in your name. A credit freeze is free and can be lifted temporarily when you need to apply for credit. Review your credit reports regularly through AnnualCreditReport.com and watch for unfamiliar accounts, inquiries, or changes. If you receive an offer of identity theft protection through this incident, enroll before any deadline. You can also report suspected identity theft and get a personalized recovery plan at IdentityTheft.gov.

Your Legal Rights

If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.

Were You a Victim of a Data Breach?

"*" indicates required fields

By clicking the SEND button and submitting this form, I consent to receive communications from Almeida Law Group LLC and their co-counsel by phone call, email, and/or SMS regarding this matter and other potential legal matters. I understand that message and data rates may apply and that consent to such contact is not required for use of these services. Message frequency varies. Reply STOP to opt-out and HELP for help. I also agree to the Privacy Policy. I understand that my information may be shared with advertising partners to deliver targeted advertisements and optimize outreach efforts. I confirm that I am at least 18 years old. I have read and understand the disclaimer above. I agree my use of this site and the information provided here is not intended to create and does not create an attorney client relationship with the Almeida Law Group and/or attorneys employed by the Firm. No attorney client relationship is intended or created unless and until an engagement agreement is signed by all relevant parties. The contents of this site constitute attorney advertising and not legal advice; therefore you should not act or rely upon any information contained herein, and should always seek the advice of an attorney.

Resourceful. Resilient. Relentless.

Contact us today to get the justice you and your family deserve.