Nordstrom Rack
Data Breach on January 15, 2026
| Data Breach Report | |||
|---|---|---|---|
| Victim | nordstromrack.com | ||
| Threat Actor | TENGU | ||
| Date Discovered | Jan 15, 2026 | ||
| Description | Nordstrom Rack is an American off-price retail division of Nordstrom Inc. based in the USA (Washington), offering discounted clothing, accessories, shoes and home products from top brands. | ||
| Leak Size | Unknown |
Credential Exposure for nordstromrack.com
We've indexed 63 @nordstromrack.com accounts from external breaches, plus 4,374 credentials for nordstromrack.com itself.
Last checked Aug 23, 2026
| @nordstromrack.com addresses from external breaches | |
|---|---|
| Third-party breaches | 45 accounts · across 4 breaches · 45 with a plaintext password · most recent Aug 18, 2024 |
| Combo lists | 18 accounts · most recent Aug 17, 2026 |
| Passwords for nordstromrack.com accounts | |
|---|---|
| Combo lists | 3,128 logins · most recent Aug 23, 2026 |
| Infostealer logs | 1,541 logins · 1,225 infected devices · most recent Aug 8, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
Nordstrom Rack was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.