Yes, a breach affecting information connected with Dollar Tree and Family Dollar was reported—but the incident occurred at workforce-services vendor Zeroed-In, not at Dollar Tree checkout systems. Maine’s breach filing lists 1,977,486 people affected, a figure often rounded to 2 million. The records were described as concerning applicants and current or former employees of Zeroed-In clients, not ordinary retail shoppers.
What happened in the Zeroed-In breach?
Zeroed-In Technologies provides workforce analytics and human-resources services. According to its filing with the Maine Attorney General, an external party accessed certain Zeroed-In systems on August 7, 2023. The company discovered the incident on August 31, reviewed files to identify affected people, and scheduled written notifications for November 27, 2023. Contemporary reporting described unauthorized access during August 7–8. The filing reports the incident and the company’s response; it is not a court finding about how the intrusion occurred. Maine Attorney General breach record
Zeroed-In’s notice concerned files connected with certain clients, including Dollar Tree and Family Dollar. Dollar Tree said Zeroed-In informed it of the incident and that the vendor provided notice to current and former employees. TechRadar’s account of Dollar Tree’s statement
How many people were affected, and who were they?
The Maine filing gives the total as 1,977,486 people; “2 million” is a rounded version of that reported count. The filing lists 7,034 affected Maine residents. Reporting described the affected group as applicants and current and former employees of Zeroed-In clients. It does not establish that all affected people worked for Dollar Tree, or that every record was associated with Dollar Tree or Family Dollar. SecurityWeek’s coverage
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errors#1 Best Overall
What information was involved?
The Maine filing identifies names or other personal identifiers together with Social Security numbers. Contemporaneous reporting about the sample notification also described addresses and dates of birth. The available descriptions do not show that every affected person had every listed data element exposed. PR Newswire’s report on the sample notice
Were Dollar Tree shoppers’ payment details affected?
The publicly described incident was a breach of Zeroed-In’s systems involving workforce-related records. The reporting does not identify ordinary Dollar Tree shoppers, loyalty-program members, or payment-card holders as the affected population, and it does not show that Dollar Tree’s retail payment systems were breached in this incident. A headline saying “Dollar Tree customers” can therefore be misleading if it suggests retail shoppers; the reports point to applicants and workers associated with vendor clients.
What protection did the notice offer?
The Maine filing says affected people were offered 12 months of TransUnion credit monitoring, identity-restoration services, and identity-theft insurance. Those benefits were tied to the breach notice; the filing does not establish that enrollment remains available now. If you received a letter, use its instructions and check its eligibility and enrollment deadlines before relying on the offer.
What to do if you received a notice
- Verify it independently. Check that the notice identifies Zeroed-In and explains the incident, affected information, and any monitoring enrollment process. Do not respond to unsolicited calls or messages asking for passwords, one-time codes, payment, or bank details. If uncertain, contact the organization through contact information you locate independently.
- Use the notice’s protection offer if you are eligible. Enroll only through the process described in the notice, and keep a copy of the letter and enrollment confirmation.
- Consider a credit freeze. Contact Equifax, Experian, and TransUnion to freeze your credit files. A freeze can make it harder for someone to open new credit in your name by restricting access to your file. It is different from monitoring: you may need to lift it when applying for credit.
- Review reports and accounts. Look for unfamiliar accounts, credit inquiries, address changes, and unexpected activity in bank, payroll, tax, and benefits accounts. A fraud alert is another option if a freeze is not practical; it asks creditors to take extra steps to verify identity rather than blocking access to a credit file.
- Secure important logins. Use unique passwords and multifactor authentication, especially for email, payroll, banking, tax, and benefits accounts. Be cautious of messages impersonating Dollar Tree or Family Dollar HR, Zeroed-In, a monitoring provider, a bank, or a government agency.
- Act on suspected identity theft. Report it and get recovery guidance at IdentityTheft.gov. Keep the breach letter and records of suspicious activity or disputed accounts.
If you did not receive a notice
Not receiving a letter does not establish that you were affected, and it does not establish that you were not. The breach description includes applicants and current and former employees of clients, so former employment alone does not rule out possible inclusion. Contact the relevant organization using independently verified details if you need to ask about your status; do not assume a notice can be replaced or eligibility confirmed through an unsolicited message.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11What is known about the lawsuit?
Dollar Tree sued Zeroed-In in federal court over contractual indemnification and defense costs. The court’s October 28, 2025 order summarized Dollar Tree’s allegations that it had incurred at least $1.605 million defending third-party claims and that 29 claims had been brought against Dollar Tree and/or Zeroed-In. Those figures are allegations in the litigation record, not a ruling that the claimed amount is owed to individuals.
The court denied Dollar Tree’s motion for judgment on the pleadings because material factual disputes remained, including disputes over whether expenses were necessary and reasonable and the scope of contractual indemnification. That procedural ruling was not a final determination that Zeroed-In must pay all claimed costs, a consumer settlement, or an award to affected people. October 28, 2025 court order
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
