Loyalty data is customer information collected through rewards, membership, or similar programs. It can include contact details, account identifiers, purchase history, points balances, and preferences. When combined with shopping activity, it may reveal sensitive patterns about a person’s behavior.
In cyber security, this data matters because attackers may use it for targeted phishing, account fraud, identity abuse, or extortion. Retailers should protect loyalty systems and data exports with restricted access, strong authentication, encryption, and audit logging, and retain only what they need. A claim that loyalty data was exposed does not by itself confirm that a breach occurred or that the material is authentic.