RMS Data Breach Exposes Personal Information of Over 16,000 Individuals On March 20, 2026, Retail Merchandising Services (RMS), a Pittsburgh-based company specializing in retail inventory management, disclosed a cybersecurity incident that compromised the personal data of more than 16,000 individuals. The breach involved unauthorized access to RMS’s network, potentially exposing sensitive personally identifiable information (PII), including names paired with Social Security numbers, dates of birth, account numbers, and routing numbers. Lynch Carpenter, LLP, a national class action law firm, has launched an investigation into the incident, inviting affected individuals to seek legal review. The firm, which has handled data privacy cases for over a decade, is examining potential claims related to the breach. RMS has not yet provided further details on the timeline of the attack or the methods used by the unauthorized actor. The incident adds to a growing list of retail sector breaches, underscoring persistent vulnerabilities in third-party service providers handling sensitive consumer data.