Goose Creek: Have I Been Pwned’s Post

Goose Creek Data Breach Exposes 6.6 Million Customer Records

Last month, customers of Goose Creek, a retail and e-commerce brand, reported receiving suspicious emails warning of a potential data breach. The incident was later confirmed when 6.6 million records including email addresses, names, phone numbers, and physical addresses were uploaded to Have I Been Pwned (HIBP), a breach notification service.

Analysis revealed that 84% of the exposed email addresses were already linked to LinkedIn profiles, suggesting a significant overlap with professional networks. The breach raises concerns about the potential for targeted phishing attacks or identity fraud, given the combination of personal and contact details compromised.

While the exact timeline of the breach remains unclear, the disclosure highlights ongoing risks in data security, particularly for companies handling large volumes of customer information. The incident underscores the importance of robust cybersecurity measures to prevent unauthorized access to sensitive data.

Source: https://www.linkedin.com/feed/update/urn:li:activity:7483027403565510657

Goose Creek cybersecurity rating report: https://www.rankiteo.com/company/goose-creek

"id": "GOO1784096766",
"linkid": "goose-creek",
"type": "Breach",
"date": "6/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '6.6 million',
                        'industry': 'Retail',
                        'name': 'Goose Creek',
                        'type': 'Retail and E-commerce'}],
 'customer_advisories': 'Customers reported receiving suspicious emails '
                        'warning of a potential data breach',
 'data_breach': {'number_of_records_exposed': '6.6 million',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High (personally identifiable '
                                        'information)',
                 'type_of_data_compromised': ['Email addresses',
                                              'Names',
                                              'Phone numbers',
                                              'Physical addresses']},
 'description': 'Last month, customers of Goose Creek, a retail and e-commerce '
                'brand, reported receiving suspicious emails warning of a '
                'potential data breach. The incident was later confirmed when '
                '6.6 million records including email addresses, names, phone '
                'numbers, and physical addresses were uploaded to Have I Been '
                'Pwned (HIBP), a breach notification service. Analysis '
                'revealed that 84% of the exposed email addresses were already '
                'linked to LinkedIn profiles, suggesting a significant overlap '
                'with professional networks. The breach raises concerns about '
                'the potential for targeted phishing attacks or identity '
                'fraud, given the combination of personal and contact details '
                'compromised.',
 'impact': {'brand_reputation_impact': 'Potential impact due to data breach',
            'data_compromised': '6.6 million records (email addresses, names, '
                                'phone numbers, physical addresses)',
            'identity_theft_risk': 'High (potential for targeted phishing '
                                   'attacks or identity fraud)'},
 'references': [{'source': 'Have I Been Pwned (HIBP)'}],
 'title': 'Goose Creek Data Breach Exposes 6.6 Million Customer Records',
 'type': 'Data Breach'}