On May 22, 2024, Me Too Shoes appeared on the leak site operated by the Play ransomware group. The listing states that internal files were exfiltrated during a ransomware attack on the US-based retailer. The disclosure does not quantify how many customer or employee records were affected, nor does it list specific data types beyond the broad description of internal files.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Me Too Shoes
Get alerted the next time Me Too Shoes files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Me Too Shoes’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Details from the Leak Site
The Play ransomware operators posted a dedicated topic page for Me Too Shoes on their Tor-hosted leak site. According to the primary disclosure, the company suffered a ransomware intrusion in which attackers successfully exfiltrated internal files before encryption. The listing does not provide a sample of the stolen data, a ransom demand figure, or a public deadline, which is consistent with Play’s selective publication strategy. The incident is confirmed only through the group’s own leak portal, accessible via the onion link indexed by ransomware.live.
Internal files exfiltrated is the sole description given; whether this includes customer names, addresses, payment details, employee records, or supplier contracts remains unknown to the public.
Why This Matters for You and Your Family
When a retailer like Me Too Shoes loses control of internal files, the information often contains details that tie your shopping history to your identity. Purchases, return addresses, email correspondence, and phone numbers collected during checkout can surface in extortion campaigns or be sold quietly on underground markets. Even if you never shopped there, family members or household accounts linked to the same address or shared email may still be exposed. The breach adds another credential or personal-data record to the growing pool that criminals use to build profiles on ordinary people.