A ransomware group calling itself xpl0itrs claims to have carried out an attack on Target, according to a listing on the group’s own leak site dated August 20, 2026. This claim is currently unverified — it has not been confirmed by Target, and no regulator has confirmed it either. The listing was identified and catalogued by ransomware.live, a security research platform that monitors public leak sites operated by ransomware groups.
What we know — and don’t
- A group identifying itself as xpl0itrs posted a claim referencing Target on its leak site, with a claimed date of August 20, 2026.
- Target operates in the retail sector.
- The specific types of data allegedly accessed have not been disclosed or confirmed by the group, by Target, or by any independent party.
- No official confirmation of a breach has been issued by Target as of this writing.
- This claim is tracked through ransomware.live, which monitors leak-site postings but does not itself verify the underlying claims.
What should you do if you have an account with this company?
- Change your password for your account, and avoid reusing that password anywhere else.
- Enable two-factor authentication (2FA) on the account if it is not already active.
- Watch closely for phishing emails or texts that reference this company, especially messages urging urgent action or asking you to click a link.
- Avoid clicking on unexpected links or attachments claiming to be from the company until you can verify them directly through official channels.
- Consider signing up for identity monitoring, such as a service like Aura or LifeLock, to get alerted if your personal information turns up in places it shouldn’t.
- Check your financial statements and account activity periodically for anything unusual.
BreachLetter will update this page if Target confirms this incident, if it is officially reported to regulators, or if new verified information becomes available.