Gap International, Inc.

Gap International, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-12-03. 11 Massachusetts residents were affected.

Gap International, Inc. notified the NH Attorney General of a data security incident affecting 2 New Hampshire residents. On July 22, 2025, the company experienced a network disruption and initiated an investigation. Independent cybersecurity experts were engaged. The investigation determined that certain files may have been accessed or acquired without authorization. A comprehensive review concluded on October 29, 2025, that personal information, including names, Social Security numbers, driver's license/state ID numbers, medical information, and health insurance information, was contained in the affected data. Notices were sent to affected residents on November 28, 2025. The company is providing credit monitoring and fraud assistance services.

Gap International, Inc. notified Vermont consumers of a data security incident discovered on July 22, 2025. Unauthorized access to certain files containing names, SSNs, driver's licenses, and medical/health insurance information was confirmed on October 29, 2025. No evidence of misuse was found. The company engaged cybersecurity experts, enhanced security measures, and provided credit monitoring and fraud assistance via Cyberscout/Identity Force.