Gap
Data Breach on October 06, 2025
| Data Breach Report | |||
|---|---|---|---|
| Victim | gapinc.com | ||
| Threat Actor | ScatteredLAPSUSHunters | ||
| Date Discovered | Oct 06, 2025 | ||
| Description | Gap Inc. is a global clothing and accessories retailer based in the USA (California), operating brands like Gap, Banana Republic, Old Navy, Athleta, and managing both physical stores and online retail. | ||
| Leak Size | 1GB |
Credential Exposure for gapinc.com
We've indexed 600 @gapinc.com accounts from external breaches, plus 290 credentials for gapinc.com itself.
Last checked Aug 16, 2026
| @gapinc.com addresses from external breaches | |
|---|---|
| Third-party breaches | 600 accounts · across 17 breaches · 565 with a plaintext password · most recent Dec 18, 2025 |
| Combo lists | 10 accounts · most recent Dec 3, 2025 |
| Passwords for gapinc.com accounts | |
|---|---|
| Combo lists | 253 logins · most recent Aug 15, 2026 |
| Infostealer logs | 62 logins · 48 infected devices · most recent Aug 6, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
Gap was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.