INC Ransom Claims 1.2 Terabyte Data Breach of Dollar Tree, Major US Retailer

The INC Ransom ransomware gang has identified US discount retailer Dollar Tree as a victim on its darknet leak site, claiming to have stolen 1.2 terabytes of data. An INC Ransom spokesperson stated in the leak post, “They became a victim of the data breach.” The post indicated that sensitive and personal data would soon be published on their blog. Included in the leak were various documents and scanned images, such as passports, confidentiality agreements, and details of sexual harassment claims, alongside other employee data.

However, the majority of the documents appeared to relate to a similar retail chain, 99 Cents Only, which INC Ransom referenced in their claim. Dollar Tree, Inc. (NASDAQ: DLTR) had recently acquired designation rights for 170 leases of 99 Cents Only Stores across Arizona, California, Nevada, and Texas. This acquisition was completed through two transactions approved by the United States Bankruptcy Court for the District of Delaware. Despite the claims made by INC Ransom, Dollar Tree has denied that its systems were compromised, with the only document linked to Dollar Tree being the cover of a Dollar Tree Store Associates’ Handbook.