Retail Merchandising Services

Retail Merchandising Services based in Brooklyn Park, Minnesota, a other entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-02-25 and reported on 2026-03-17. 1,386 Texas residents were affected. 16,114 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Financial Information (e.g. account number, credit or debit card number);Date of Birth. Consumers were notified via U.S. Mail.

Retail Merchandising Services (RMS) reported an unauthorized access to an email account in Nebraska. Unauthorized access occurred between November 24, 2025, and January 7, 2026. RMS detected the activity in January 2026. The breach affected 167 Nebraska residents, exposing names, dates of birth, Social Security numbers, and financial account/routing numbers. RMS engaged specialists, enhanced security policies, and provided 12 months of credit monitoring via TransUnion. Notification to individuals and regulators began March 16, 2026.

Retail Merchandising Services notified Massachusetts residents of a data breach via a letter dated March 12, 2026. The notice offers 24 months of credit monitoring and fraud assistance through Cyberscout. The provided document excerpt contains only the remediation/monitoring offer and standard consumer advice; it lacks the narrative description of the incident, dates of occurrence/discovery, specific data types affected, or the number of individuals impacted. Consequently, incident specifics are unknown.

Retail Merchandising Services reported a data breach to the Indiana Attorney General. The breach occurred on 2025-11-24 and was reported on 2026-03-16. 334 Indiana residents were affected. 16,114 individuals affected in total.

Retail Merchandising Services (RMS) experienced a data breach occurring between November 24, 2025 and January 7, 2026. Affected individuals were notified and offered 12 months of complimentary credit monitoring and identity theft insurance through Cyberscout, a TransUnion company. RMS stated it is taking additional steps to bolster its cybersecurity environment. Approximately 25 Rhode Island residents were noted as impacted.

Retail Merchandising Services notified consumers of a data breach affecting personal information including names, SSNs, DOBs, and financial account numbers. The company is offering 12 months of credit monitoring. The notice was filed with the Vermont Attorney General on March 16, 2026.

Retail Merchandising Services (RMS) notified the New Hampshire Attorney General of a data event involving unauthorized access to one email account between November 24, 2025, and January 7, 2026. The breach affected 59 New Hampshire residents, exposing names, dates of birth, Social Security numbers, and financial account/routing numbers. RMS engaged forensic specialists, enhanced security policies, and provided 12 months of complimentary credit monitoring to affected individuals. Notifications were sent starting March 16, 2026.

Retail Merchandising Services reported a data breach occurring on November 24, 2025, discovered on February 25, 2026. The incident affected 16,114 individuals nationwide, including 54 Maine residents. The breach involved the unauthorized access of personal information, including names, government IDs, and financial account numbers. The company is offering 12 months of credit monitoring and identity theft protection services to affected individuals.

Retail Merchandising Services reported a data breach to the Indiana Attorney General. The breach occurred on 2025-11-24 and was reported on 2026-03-16. 334 Indiana residents were affected. 16,114 individuals affected in total.

RETAIL MERCHANDISING SERVICES filed a data-breach notice with the Illinois Attorney General in March 2026 (case 26-03-1067). The register records the breach as discovered on February 25, 2026. Personal information types reported: financial account number, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.