Risk level: medium. Can you change it: no. Found in 87 breaches in this directory.
What this data is
Records of items or services you bought, often with order numbers, prices, dates, delivery addresses and the store or seller involved.
The risk on its own
Purchase records cannot be used to spend your money, but they reveal your lifestyle, health needs and habits. Items like medication, adult products or baby goods can be highly personal. They also confirm where you shop, which helps scammers impersonate those stores.
The risk combined with other data
With your name, email and address, real order numbers make fake delivery and refund messages look genuine. Criminals can call claiming there is a problem with a specific recent order and ask for card details. Expensive purchases show which homes may have valuable items.
How criminals use it
An email references your real order number and asks you to pay a customs fee through a fake link.
A caller claiming to be the store says a recent order needs a refund and asks for remote access to your computer.
Purchase history showing medication or adult products is used to embarrass or extort you.
Delivery of an expensive item to your address is noted by someone planning theft.
What to do now
Check order history in the store account for purchases you did not make.
Handle order problems only by logging in to the store's app or website directly.
Change the password on the store account and remove saved cards you do not need.
Ignore unexpected refund calls and never allow remote access to your computer.
Ask the retailer whether payment details were exposed in addition to order information.
Frequently asked questions
Can someone use my purchase history to buy things?
Not by itself. It does not contain enough payment information. The risk is scams that refer to your real orders.
I got a text about a delivery problem. Is it related?
It might be. Do not click the link. Check the order in the retailer or courier app you already use.
Can I ask a store to delete my order history?
You can ask, but businesses often keep transaction records for tax and accounting reasons for several years.
Breaches that exposed this data
Under Armour: 2025-11-17, 73M accounts, Dates of birth, Email addresses, Genders, Geographic locations, Names, Purchases
Hot Topic: 2024-10-19, 57M accounts, Dates of birth, Email addresses, Genders, Names, Partial credit card data, Phone numbers
Breach data sourced from Have I Been Pwned, used under CC BY 4.0. Additional breach metadata provided by XposedOrNot. DataExposed is an independent service and is not affiliated with or endorsed by either.