Hibbett Retail Data Breach Investigation — Do You Qualify?
Updated September 18, 2026
- Defendant
- Hibbett Retail, Inc.
- Status
- Under investigation
- Potential compensation
- If the case succeeds or settles
- How to join
- Accepting claimants now
- Proof required
- No claim form proof for basic payout
Overview
- Affected relationship
- Current and former workers, affiliated-company personnel, dependents, and beneficiaries
- Network access
- April 22–25, 2026, according to Hibbett's filed notice
- Reported reach
- About 109,732 people nationwide in Texas reporting; state counts do not replace individual notice
- Available now
- One year of Experian services for eligible notice recipients and optional attorney review
Hibbett Retail, Inc. operates athletic footwear and apparel stores under names including Hibbett and City Gear, along with online shopping channels. The company became part of JD Sports after a 2024 acquisition. The incident described here concerns human-resources records, not customer purchase accounts.
Hibbett's notice says an unauthorized third party accessed its computer systems from April 22 through April 25, 2026 and may have acquired files containing personnel records. Texas reporting identified about 109,732 affected people nationwide, including 15,223 Texans; Washington reported 510 affected residents.
The information differed by person and may have included names, addresses, dates of birth, Social Security numbers, government identification numbers, financial information, medical information, and health-insurance information. Hibbett said it was not aware of fraud or identity theft linked to the incident when it issued notices.
Attorneys are recruiting affected people to evaluate possible claims. No lawsuit about this 2026 incident, certified class, settlement fund, official compensation claim, or guaranteed payment was verified. Hibbett separately offers eligible notice recipients one year of Experian IdentityWorks Credit 3B services using the activation code and deadline in their letter.
Who qualifies
- You received a Hibbett Retail notice stating that your personal information may have been involved in the April 2026 incident.
- You are a current or former Hibbett or affiliated-company employee or consultant, or a dependent or beneficiary whose information was maintained in the affected personnel records.
- Your individual letter identifies one or more data categories as potentially involved; the public list does not mean every category applied to every person.
- You understand that attorney intake is not an official Hibbett response process, a filed lawsuit, a settlement claim, or a guarantee of representation or payment.
How to file your claim
- 1Keep the complete Hibbett notice, envelope, activation code, and records showing your employment or other relationship with Hibbett or an affiliated company.
- 2If you want the complimentary Experian service, use the instructions and deadline in your own notice. The public sample redacts the activation deadline.
- 3Review credit, bank, benefits, and medical-insurance records for activity you do not recognize. Consider a fraud alert or credit freeze when appropriate.
- 4Preserve receipts, replacement-document costs, reports, correspondence, and a dated log of time spent responding to the incident.
- 5Submit the eligibility form below only if you want possible legal claims reviewed. It is not Hibbett's monitoring enrollment or an official settlement claim.
This case is still developing and has no official claim site yet. Class Action Pulse is not a law firm — submit your details below to be notified and connected with a firm handling the case.
Do you qualify?
Check your eligibility and get help understanding your claim. It's free and takes under a minute.
Sources
Frequently asked questions
Who was affected by the Hibbett data breach?
The notice describes personnel records involving current and former employees and consultants, including people associated with affiliated companies, plus certain dependents and beneficiaries. It does not identify customer shopping accounts as affected.
What information may have been involved?
Depending on the person, the records may have included names, addresses, birth dates, Social Security numbers, driver's-license or other government-ID numbers, financial information, medical information, and health-insurance information. Check your own notice for the categories tied to you.
Is there a Hibbett class action settlement for this incident?
No settlement or compensation claim for the 2026 incident was verified. A separate, older Hibbett receipt case is unrelated and closed. The current matter is an attorney investigation.
Did Hibbett say the information was misused?
Hibbett said it was not aware of fraud or identity theft related to the incident when it issued the September 2026 notice. That statement does not predict whether misuse will occur later.
What does contacting an attorney do?
It permits a lawyer or legal representative to review your circumstances. It does not automatically create an attorney-client relationship, file a lawsuit, make you a class member, or guarantee compensation.