Bed Bath & Beyond

Disclosed May 3, 20197 years ago2,995 affectedConfirmed

Official notice

What is known

People affected	2,995 (as reported by the organization)
Disclosed	May 3, 2019
Discovered	Apr 23, 2019
Happened	Sep 4, 2019
Attack	Not stated
Data exposed	Names, Payment cards, Financial
Sector	Other · US
Status	Confirmed

Sources

Source	Kind
California Attorney General breach notice: Bed Bath & Beyondoag.ca.gov · Official notice	Official notice
Indiana Attorney General 2020 data breach report: Bed Bath & Beyondin.gov · Official notice	Official notice
Maine Attorney General breach notice archive: Bed Bath & Beyondmaine.gov · Official notice	Official notice

Notices filed

Where	Filed	People
Maine AGresidents of ME	May 3, 2019	1
California AGresidents of CA	Oct 29, 2019
Indiana AGresidents of IN	Feb 26, 2020	1

Other breaches at Bed Bath & Beyond

Breach	Disclosed	Attack	Sector	Status	Affected
Disclosed Jun 19, 2017Jun 19, 20179 years ago	Jun 19, 20179 years ago	Not stated	Other	Confirmed	153
Disclosed Sep 22, 2015Sep 22, 201511 years ago	Sep 22, 201511 years ago	Not stated	Other	Confirmed	Unknown

History of this record

2026-09-25 · data_types: [] to ["names","payment-card","financial"] · backfill source
2026-09-25 · disclosed: 2019-10-29 to 2019-05-03 · backfill source
2026-09-25 · discovered: empty to 2019-04-23 · backfill source
2026-09-25 · records_basis: empty to organization · backfill source
2026-09-25 · records: empty to 2995 · backfill source
2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Bed Bath & Beyond

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.