Millions of customers may have been affected by a Hudson’s Bay data breach in which hackers targeted two major department stores, Saks Fifth Avenue and Lord & Taylor. Both of these stores are owned by Hudson’s Bay Company, and the massive data breach reportedly affected five million credit and debit card numbers from customers of these stores.
Basics of the Hudson’s Bay Data Breach
The New York-based cybersecurity firm Gemini Advisory LLC reports that hackers from the well-known hacking syndicate JokerStash started the Hudson’s Bay data breach and began stealing customers’ card numbers in May 2017. The hackers have since claimed credit for stealing five million card numbers and have put some for sale on the “dark web.”
A company spokesman, addressing the Hudson’s Bay data breach, said that the investigation is ongoing—and though the hackers claimed to have stolen five million card numbers, the spokesman didn’t offer confirmation or denial of this number. The Hudson’s Bay data breach is currently being investigated, and should more information be uncovered, such as whether or not more customer information was exposed (Social Security or driver’s license information, for instance), customers will be notified.
Of significant concern is the fact that information like customers’ credit and debit card information can be sold for profit to parties interested in obtaining consumer information, who could use it to make fraudulent purchases or commit identity theft. Although these problems can be fixed, it is generally a huge hassle. A study conducted by the Department of Justice’s Bureau of Justice Statistics, “among victims who had personal information used for fraudulent purposes, 29% spent a month or more resolving problems.”
Some have claimed that the Lord & Taylor data breach is a result of insufficient security practices, which allowed the hacking to occur in the first place.
Some customers have chosen to pursue litigation over the Hudson’s Bay data breach. According to lawsuits, the retail chains affected by the breach—Lord & Taylor, Saks Fifth Avenue, and Saks OFF 5th—failed to adequately protect the sensitive data of their consumers.
According to plaintiffs, the Hudson’s Bay data breach was a direct result of these companies’ “failure to establish and implement appropriate administrative, technical, and physical safeguards to ensure the security and confidentiality of [consumers’ information] to protect against reasonably foreseeable threats to the security or the integrity of such information.”
Even after the company learned that the Hudson’s Bay data breach had occurred, it failed to notify customers that their sensitive data may have been compromised for nearly a year after the breach itself took place.
Joining a Hudson’s Bay Data Breach Investigation
If you were affected by the Hudson’s Bay data breach, you may be able to join a data breach class action lawsuit investigation. Filing a lawsuit may be able to provide some compensation.
Join a Free Lord & Taylor and Saks Fifth Avenue Data Breach Class Action Lawsuit Investigation
Consumers affected by the 2017 Saks Fifth Avenue, Saks OFF Fifth, and Lord & Taylor data breach incidents may qualify to join a free data breach class action lawsuit investigation. A data breach lawsuit could help you or a loved one recover compensation for stolen credit card information and the threat of identity theft.
ATTORNEY ADVERTISING
Top Class Actions is a Proud Member of the American Bar Association
LEGAL INFORMATION IS NOT LEGAL ADVICE
Top Class Actions Legal Statement
©2008 – 2026 Top Class Actions® LLC
Various Trademarks held by their respective owners
This website is not intended for viewing or usage by European Union citizens.


2 thoughts onHudson’s Bay Data Breach Affects Saks, Lord & Taylor Customers
Check for $30 received in San Francisco
I received something in my informed delivery from HBC settlement