Dollar Tree Data Breach: 1.2TB of Sensitive Data Stolen

The INC Ransomware group has claimed responsibility for a major data breach at Dollar Tree. The group has claimed to have stolen 1.2TB of sensitive personal data.

Dollar Tree generates $17.58 billion in annual revenue despite selling most items at $1.25 or less. The breach affects one of America’s largest discount retailers, making this incident particularly concerning for millions of customers and employees.

What Sensitive Data Was Compromised?

The stolen information includes highly sensitive documents such as:

• Passport copies
• Completed payroll forms
• Job offer letters
• Employment agreements
• Legal correspondence between management and staff
• Sexual harassment and discrimination complaints

These documents contain personal information that could be used for identity theft or other malicious purposes.

TROYPOINT Tip: Never worry about identity theft again by using Aura which is TROYPOINT’s recommended identity theft protection!

Aura Identity Theft Protection Review

Dollar Tree Response and Clarification

Dollar Tree has disputed the ransomware group’s claims. A company spokesperson noted that the data likely came from 99 Cents Only Stores, not Dollar Tree itself. Below is their official statement:

“We are aware of claims made by a ransomware group regarding 99 Cents Only Stores. The files referenced in these claims appear to involve former 99 Cents Only employees. Dollar Tree’s involvement with 99 Cents Only Stores is related to the purchase of select real estate lease rights following their closure. We did not acquire their corporate entity, systems/network, or data. Any allegation of Dollar Tree’s involvement is inaccurate.”

About INC Ransomware

INC Ransom, also called GOLD IONIC, has operated since July 2023. This sophisticated group targets healthcare, education, and industrial sectors across the United States and Europe.

Recent high-profile attacks include:

• Ahold Delhaize (Albert Heijn parent company) – 6TB stolen
• UK’s National Health Service – patient data compromised
• NHS Scotland – 3TB stolen with $5+ million ransom demand

The group uses double-extortion tactics, encrypting data while also stealing it to threaten public release. They recently rebranded as “Lynx” but continue using the same methods.

Final Thoughts

Yet again, we see another major data breach at a Fortune 500 company, whether involving Dollar Tree directly or through their business connections.

These cyber attacks will continue happening as ransomware groups target large corporations with valuable data.

The frequency of these data breaches shows that it’s important for individuals to be proactive and protect themselves when possible…

For more information on this story, refer to the original report from Hackread and the Dollar Tree website for potential updates.

We want to know your thoughts. What do you think about this story? Let us know in the comment section below!

Be sure to stay up-to-date with the latest streaming news, reviews, tips, and more by following the TROYPOINT Advisor with updates weekly.