The INC Ransomware group claimed responsibility for a data breach at Dollar Tree, alleging the theft of 1.2TB of sensitive and personal data, including passport copies, payroll forms, job letters, legal correspondence, and complaints involving sexual harassment and discrimination cases. The leaked data primarily pertains to former employees of 99 Cents Only Stores, a separate entity from which Dollar Tree acquired only real estate lease rights—not its systems or data. Despite Dollar Tree’s denial of direct involvement, the ransomware group insists the breach is tied to the company. INC Ransomware, known for double-extortion tactics, has previously targeted high-profile victims like Ahold Delhaize (6TB stolen) and the UK’s NHS, demanding ransoms exceeding $5 million. The group operates with sophisticated malware, often rebranding (e.g., as Lynx) while maintaining aggressive extortion strategies. The breach underscores escalating cyber threats against major corporations, with employee data exposure posing reputational, legal, and operational risks. Dollar Tree’s response emphasizes the data’s origin from 99 Cents Only Stores, but the incident highlights vulnerabilities in third-party associations.