Target: Target may have suffered another damaging data leak as hackers claim 8.6GB haul

Target Faces Second Alleged Breach in 2026 as Hacker Demands Ransom

In mid-June 2026, a hacker using the alias Xpl0itrs claimed to have stolen 8.6GB of Target’s source code, threatening to leak the data on the dark web unless the company paid a ransom. The incident would mark Target’s second breach of the year if confirmed.

However, cybersecurity researchers remain skeptical. Unlike Target’s confirmed January 2026 breach where a threat actor leaked 860GB of internal data, including source code, configuration files, and developer documentation Xpl0itrs has not provided verifiable samples of the stolen material. Some experts suggest the hacker may be recycling data from the earlier breach, as the claimed leak lacks supporting evidence.

Xpl0itrs has a history of unverified claims, including failed threats against Spotify, the U.S. Department of the Treasury, OpenAI, and Trustpilot. A previous alleged breach of BMW was also debunked, with some data found to be publicly available. The lack of transparency and prior inconsistencies cast doubt on the legitimacy of the latest threat.

Target has not yet responded to the allegations. If confirmed, the breach would underscore persistent vulnerabilities in the retailer’s cybersecurity defenses, following the January incident that exposed sensitive internal systems.

Source: https://www.techradar.com/pro/security/target-may-have-suffered-another-damaging-data-leak-as-hackers-claim-8-6gb-haul

Target cybersecurity rating report: https://www.rankiteo.com/company/target

"id": "TAR1787336713",
"linkid": "target",
"type": "Ransomware",
"date": "6/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Retail',
                        'name': 'Target',
                        'type': 'Retailer'}],
 'data_breach': {'data_exfiltration': 'Claimed but unverified',
                 'file_types_exposed': ['Source code', 'Configuration files'],
                 'sensitivity_of_data': 'High (internal systems)',
                 'type_of_data_compromised': 'Source code'},
 'date_detected': '2026-06',
 'date_publicly_disclosed': '2026-06',
 'description': 'In mid-June 2026, a hacker using the alias *Xpl0itrs* claimed '
                'to have stolen 8.6GB of Target’s source code, threatening to '
                'leak the data on the dark web unless the company paid a '
                'ransom. The incident would mark Target’s second breach of the '
                'year if confirmed. However, cybersecurity researchers remain '
                'skeptical as *Xpl0itrs* has not provided verifiable samples '
                'of the stolen material. Some experts suggest the hacker may '
                'be recycling data from the earlier breach in January 2026.',
 'impact': {'brand_reputation_impact': 'Potential reputational damage if '
                                       'confirmed',
            'data_compromised': '8.6GB of source code'},
 'investigation_status': 'Ongoing (unverified)',
 'motivation': 'Financial gain',
 'ransomware': {'data_exfiltration': 'Claimed but unverified',
                'ransom_demanded': True},
 'references': [{'source': 'Cybersecurity researchers'}],
 'threat_actor': 'Xpl0itrs',
 'title': 'Target Faces Second Alleged Breach in 2026 as Hacker Demands Ransom',
 'type': 'Ransomware'}