Avery Products
Disclosed Jan 10, 20251 year ago61,193 affectedConfirmed
Card skimmer on Avery website steals customers' payment data
Avery found that attackers planted a card skimmer on avery.com that captured payment details entered between July 18 and December 9, 2024; it reported 61,193 affected customers to Maine's attorney general.
What is known
| People affected | 61,193 (as reported by the organization) |
|---|---|
| Disclosed | Jan 10, 2025 |
| Discovered | Dec 9, 2024 |
| Happened | Jul 19, 2024 |
| Attack | Hacking |
| Data exposed | Names, Credentials and tokens, Addresses, Emails, Phone numbers, Payment cards |
| Sector | Retail · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Avery Productsoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Avery Productsatg.wa.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: Avery Productsattorneygeneral.delaware.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Avery Productsjustice.oregon.gov · Official notice | Official notice |
| Label giant Avery says website hacked to steal credit cardsbleepingcomputer.com · News | News |
| Vermont Attorney General: 2025-01-29 Avery Products Corporation Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2025 data breach report: Avery Productsin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Washington AGresidents of WA | Jan 10, 2025 | 1,724 |
| Delaware DOJresidents of DE | Jan 15, 2025 | 205 |
| Researchtotal | Jan 15, 2025 | 61,193 |
| California AGresidents of CA | Jan 16, 2025 | |
| Oregon DOJresidents of OR | Jan 16, 2025 | 61,100 |
| Indiana AGresidents of IN | Jan 16, 2025 | 1,195 |
| Vermont AGresidents of VT | Jan 29, 2025 | |
| California AGresidents of CA | Feb 11, 2025 |
History of this record
- 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdf · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-01-29-avery-products-corporation-data-breach-notice-consumers · backfill source
- 2026-09-25 · sector: other to retail · seed source
- 2026-09-25 · attack: ransomware to hacking · seed source
- 2026-09-25 · data_types: ["names","credentials"] to ["names","credentials","addresses","emails","phone","payment-card"] · seed source
- 2026-09-25 · summary: empty to Avery found that attackers planted a card skimmer on avery.com that captured payment details entered between July 18 and December 9, 2024; it reported 61,193 affected customers to Maine's attorney general. · seed source
- 2026-09-25 · title: empty to Card skimmer on Avery website steals customers' payment data · seed source
- 2026-09-25 · data_types: [] to ["names","credentials"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 61193 · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · disclosed: 2025-01-16 to 2025-01-10 · backfill source
- 2026-09-25 · discovered: empty to 2024-12-09 · backfill source
- 2026-09-25 · disclosed: 2025-02-11 to 2025-01-16 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.