Me Too Shoes Listed by play Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

People who have shopped with, worked for, or otherwise shared information with Me Too Shoes may now face uncertainty about whether their personal or business details have left the company’s control. On 22 May 2024 the organisation appeared on a ransomware group’s leak site, with the group claiming that internal files had been taken. The number of people affected remains unknown, and public detail about exactly what was removed is limited, yet the practical risk of identity misuse, targeted fraud, or unwanted contact is real for anyone whose data sat inside those systems.

This article sets out only what has been reported, places the claim in context, and outlines the steps ordinary people can take while the full picture stays incomplete.

What happened

On 22 May 2024, Me Too Shoes was listed by the ransomware group known as play. The listing asserts that internal files were exfiltrated during a ransomware attack. Public reporting places the organisation in the United States. No confirmed figure for the number of people affected has been released, and the precise method of intrusion, the volume of data taken, and the exact date of the initial compromise have not been disclosed in available records. The group’s claim of exfiltration is the central allegation; independent verification of the full contents of any stolen material has not been published.

The group behind it: play

Play is a ransomware operation that has been active for several years and is known for a double-extortion model: encrypting systems while also copying data and threatening to publish it if payment is not made. The group typically posts victim names on a dedicated leak site, often accompanied by samples or statements about the volume of material taken. Public reporting has linked play to attacks across multiple sectors, including manufacturing, professional services, and retail, with a pattern of targeting mid-sized organisations that hold operational and customer records. In this case the group claims Me Too Shoes is among its victims and that internal files were removed; that claim should be treated as an unverified assertion until further confirmation appears.

Who is Me Too Shoes?

Me Too Shoes is a United States-based footwear retailer. Companies of this type ordinarily maintain customer account details, order histories, payment-related records, employee information, and internal business documents such as supplier contracts, inventory data, and correspondence. A breach involving internal files can therefore touch both commercial operations and the personal data of customers and staff. Because retail organisations sit at the intersection of consumer transactions and supply-chain logistics, the exposure of their systems can create lasting practical consequences for individuals who never expected their information to leave the company’s control.

What was likely exposed

The available facts state only that internal files were exfiltrated in a ransomware attack. No further breakdown of data types—such as names, addresses, payment card numbers, or employee records—has been publicly confirmed. Organisations in the retail footwear sector typically hold customer contact and purchase information, loyalty or account credentials, employee personnel files, and operational documents. Whether any of those categories were among the files taken remains unconfirmed. Readers should therefore treat every specific data type as possible rather than proven until official notification or independent analysis appears.

Why it matters

For individuals, the chief risks are secondary misuse of any personal details that may have been present: phishing that appears more credible because it references real purchases, attempts to open new accounts, or social-engineering calls that cite genuine order information. For the organisation, the consequences include operational disruption, potential regulatory scrutiny under data-protection rules, and the longer-term cost of restoring trust with customers and partners. Because the scale of the incident is still unknown, both the personal and institutional impacts remain difficult to quantify, yet the mere fact of claimed exfiltration is enough to warrant caution.

Were you affected?

If you have an account, order history, or employment relationship with Me Too Shoes, treat the possibility of exposure as real until you receive clear confirmation otherwise. Practical first steps include:

• Monitor bank and credit-card statements for unfamiliar charges and enable transaction alerts where available.
• Change passwords on any accounts that reused credentials associated with Me Too Shoes, and enable multi-factor authentication.
• Watch for unexpected emails or calls that reference past purchases; verify them through official channels rather than links or numbers supplied in the message.
• Consider a free credit freeze or fraud alert if you live in a jurisdiction that offers those tools.
• Run a free exposure scan of your email address against known breach data sets to see whether your information has already surfaced elsewhere.

Public detail remains limited, so stay alert for any direct notification from the company itself. Acting early on the steps above reduces the chance that any leaked material can be turned against you.

AICompiled with AI assistance from public sources and published under our editorial standards.