Ralph Lauren — data breach (RalphLauren)

Domain: ralphlauren.com · Accounts affected: 139,903 · Data exposed: Age groups, Email addresses, Genders, Names, Phone numbers · Verified breach — In June 2026, fashion retailer Ralph Lauren was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published hundreds of gigabytes of data they claimed was obtained from the organisation's Salesforce instance, including 140k unique email addresses along with names, phone numbers, genders and age groups.