Hanesbrands hanesbrands.com Hanesbrands data breach: what happened and what to do
Hanesbrands detected a ransomware attack on its internal IT systems on May 24, 2022. It began sending breach notices on August 16, 2022, with credit monitoring enrollment codes. Check your letter to see what was involved in your case.
View all 13,177 breaches- Breach date
- 24 May 2022
- Made public
- 16 Aug 2022
- Last updated
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
What happened
Hanesbrands, the apparel company behind Hanes, Champion and other brands, said it detected a ransomware incident affecting certain internal IT systems on May 24, 2022. It activated its incident response and business continuity plans and hired an outside cybersecurity firm to investigate.
Notices and what was involved
Breach notices began going out on August 16, 2022, and state attorney general listings in California and Washington record the filing. A company notice says what was involved for each person, so the letter is the best guide to your own exposure. The letters included enrollment codes for credit monitoring, with an enrollment deadline of November 30, 2022. Later notices followed in the autumn.
A class action filed in January 2023 on behalf of employees argued the company waited more than four months to tell them. The suit was reported as settled in April 2024.
What this means for you
If your Social Security number, date of birth or financial account details were in your letter, criminals can use them to open credit or file fake tax returns in your name. That risk lasts well past the first year, which is why a credit freeze is worth more than waiting to see if something happens.
Sources checked: nasdaq.com, news.bloomberglaw.com, consumer.ftc.gov
Last verified against the official page:
What to do if you were in it
- 1
Read your notice letter for what was taken
Your letter lists the kinds of information involved. That list decides which of the steps below matter most for you.
- 2
Freeze your credit if a Social Security number or ID was involved
A freeze is free and stops most new accounts in your name. The FTC explains how to place one at Equifax, Experian and TransUnion, each separately.
- 3
Take the free monitoring if you were offered it
The FTC recommends using the credit monitoring or identity protection a company offers after a breach. Use the enrollment code from your letter before it expires.
- 4
Expect phishing that mentions the breach
Scammers send emails, texts and calls that quote a real breach. Don't click links in them. Go to the company's site yourself or call the number on your letter.
- 5
Report misuse
If someone opens an account or files taxes in your name, report it at IdentityTheft.gov to get a recovery plan. You can also check whether your email or phone appears in other breaches with a free Serus scan.
Frequently asked
Was I affected by the Hanesbrands data breach?
Only people who got a notice letter were told they were affected. If you worked for Hanesbrands or its brands around 2022 and didn't get one, ask the company's HR team or check the letter's contact number.
What happened in the Hanesbrands attack?
Hanesbrands detected ransomware on certain internal IT systems on May 24, 2022 and brought in a third-party forensic firm.
Is there a Hanesbrands data breach settlement?
A class action brought by employees was reported as settled in April 2024. Check the letter or the settlement administrator's site for how to claim.
Should I freeze my credit?
Yes if your letter mentions a Social Security number, a government ID or financial account details. A freeze is free.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
